diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index c22556d..b972e22 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -16,6 +16,12 @@ on:
 permissions:
   contents: read
 
+# Cancel superseded link-check runs when a branch is re-pushed. Scheduled and
+# PR runs use distinct refs, so the weekly link-rot job is unaffected.
+concurrency:
+  group: links-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   links:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 6b26d19..c66023b 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -10,6 +10,12 @@ on:
 permissions:
   contents: read
 
+# Cancel superseded lint runs when a branch is re-pushed (e.g. Renovate
+# automerge, bot PRs) to avoid burning minutes on stale commits.
+concurrency:
+  group: lint-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   lint:
     uses: DevSecNinja/.github/.github/workflows/lint.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 37f1bac..c9c10e5 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -20,6 +20,14 @@ on:
 permissions:
   contents: read
 
+# Cancel superseded PR preview builds when a branch is re-pushed (common with
+# Renovate automerge and bot PRs). Grouping by ref keeps production deploys on
+# main isolated; cancel-in-progress is limited to pull requests so an in-flight
+# production deploy is never interrupted.
+concurrency:
+  group: pages-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   pages:
     uses: DevSecNinja/.github/.github/workflows/pages.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0