diff --git a/.github/workflows/c-cpp.yml b/.github/workflows/c-cpp.yml
new file mode 100644
index 0000000000..fbf32ec92d
--- /dev/null
+++ b/.github/workflows/c-cpp.yml
@@ -0,0 +1,23 @@
+name: C/C++ CI
+
+on:
+  push:
+    branches: [ "master" ]
+  pull_request:
+    branches: [ "master" ]
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+    - name: configure
+      run: ./configure
+    - name: make
+      run: make
+    - name: make check
+      run: make check
+    - name: make distcheck
+      run: make distcheck
diff --git a/.github/workflows/rubyonrails.yml b/.github/workflows/rubyonrails.yml
new file mode 100644
index 0000000000..4af25fc743
--- /dev/null
+++ b/.github/workflows/rubyonrails.yml
@@ -0,0 +1,58 @@
+# This workflow uses actions that are not certified by GitHub.  They are
+# provided by a third-party and are governed by separate terms of service,
+# privacy policy, and support documentation.
+#
+# This workflow will install a prebuilt Ruby version, install dependencies, and
+# run tests and linters.
+name: "Ruby on Rails CI"
+on:
+  push:
+    branches: [ "master" ]
+  pull_request:
+    branches: [ "master" ]
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:11-alpine
+        ports:
+          - "5432:5432"
+        env:
+          POSTGRES_DB: rails_test
+          POSTGRES_USER: rails
+          POSTGRES_PASSWORD: password
+    env:
+      RAILS_ENV: test
+      DATABASE_URL: "postgres://rails:password@localhost:5432/rails_test"
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      # Add or replace dependency steps here
+      - name: Install Ruby and gems
+        uses: ruby/setup-ruby@55283cc23133118229fd3f97f9336ee23a179fcf # v1.146.0
+        with:
+          bundler-cache: true
+      # Add or replace database setup steps here
+      - name: Set up database schema
+        run: bin/rails db:schema:load
+      # Add or replace test runners here
+      - name: Run tests
+        run: bin/rake
+
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - name: Install Ruby and gems
+        uses: ruby/setup-ruby@55283cc23133118229fd3f97f9336ee23a179fcf # v1.146.0
+        with:
+          bundler-cache: true
+      # Add or replace any other lints here
+      - name: Security audit dependencies
+        run: bin/bundler-audit --update
+      - name: Security audit application code
+        run: bin/brakeman -q -w2
+      - name: Lint Ruby files
+        run: bin/rubocop --parallel
diff --git a/samples/Maven POM/filenames/pom.xml b/samples/Maven POM/filenames/pom.xml
index 6e329fd908..719ed3d269 100644
--- a/samples/Maven POM/filenames/pom.xml	
+++ b/samples/Maven POM/filenames/pom.xml	
@@ -19,13 +19,13 @@
 		<slf4j.version>1.7.7</slf4j.version>
 		<log4j.version>1.2.17</log4j.version>
 
-		<spring.version>4.0.5.RELEASE</spring.version>
-		<spring.data.jpa.version>1.6.0.RELEASE</spring.data.jpa.version>
+		<spring.version>5.3.34</spring.version>
+		<spring.data.jpa.version>2.6.5</spring.data.jpa.version>
 		<cglib.version>2.1_3</cglib.version>
 
-		<mysql.version>5.1.31</mysql.version>
-		<hibernate.version>4.3.5.Final</hibernate.version>
-		<hibernate-validator.version>5.1.1.Final</hibernate-validator.version>
+		<mysql.version>8.0.28</mysql.version>
+		<hibernate.version>5.4.24.Final</hibernate.version>
+		<hibernate-validator.version>6.0.23.Final</hibernate-validator.version>
 		<druid-version>1.0.6</druid-version>
 
 	</properties>
diff --git a/samples/Pip Requirements/filenames/requirements.txt b/samples/Pip Requirements/filenames/requirements.txt
index 23b4acb784..2b94d0e682 100644
--- a/samples/Pip Requirements/filenames/requirements.txt	
+++ b/samples/Pip Requirements/filenames/requirements.txt	
@@ -12,8 +12,9 @@ einops==0.3.0
 transformers==4.19.2
 webdataset==0.2.5
 open-clip-torch==2.7.0
-gradio==3.13.2
+gradio==4.31.3
 kornia==0.6
 invisible-watermark>=0.1.5
 streamlit-drawable-canvas==0.8.0
 -e .
+pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability