diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 59ab7b3b9..49861bad4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,6 +16,18 @@ env:
   CARGO_PROFILE_DEV_DEBUG: 0
 
 jobs:
+  bonk:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run Bonk
+        uses: ask-bonk/ask-bonk/github@main
+        env:
+          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          CLOUDFLARE_GATEWAY_ID: ${{ secrets.CLOUDFLARE_GATEWAY_ID }}
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+        with:
+          model: cloudflare-ai-gateway/anthropic/claude-opus-4-5
+
   rustfmt:
     name: rustfmt
     runs-on: ubuntu-latest
@@ -57,6 +69,14 @@ jobs:
         with:
           path: target
           key: clippy-${{ steps.rust-version.outputs.version }}-${{ hashFiles('Cargo.lock') }}
+      - name: Cache cargo index (save)
+        uses: actions/cache/save@v4
+        with:
+          path: |
+            .cache/cargo/registry/index
+            .cache/cargo/registry/cache
+          key: index-${{ steps.rust-version.outputs.version }}-${{ hashFiles('Cargo.toml') }}
+          enableCrossOsArchive: true
       - name: Run clippy
         run: cargo clippy --all --all-targets --features rpk,prf,mlkem
       - name: Check docs
@@ -250,14 +270,6 @@ jobs:
       shell: bash
       run: |
         echo "version=$(rustc --version)" >> $GITHUB_OUTPUT
-    - name: Prepopulate cargo index
-      uses: actions/cache/restore@v4
-      with:
-        path: |
-          .cache/cargo/registry/index
-          .cache/cargo/registry/cache
-        key: index-${{ steps.rust-version.outputs.version }}-${{ hashFiles('Cargo.toml') }}
-        enableCrossOsArchive: true
     - name: Install golang
       uses: actions/setup-go@v5
       with:
@@ -308,6 +320,14 @@ jobs:
     - name: Set Android Linker path
       if: endsWith(matrix.thing, '-android')
       run: echo "CARGO_TARGET_$(echo ${{ matrix.target }} | tr \\-a-z _A-Z)_LINKER=$ANDROID_NDK/toolchains/llvm/prebuilt/linux-x86_64/bin/$(echo ${{ matrix.target }} | sed s/armv7/armv7a/)21-clang++" >> "$GITHUB_ENV"
+    - name: Prepopulate cargo index
+      uses: actions/cache/restore@v4
+      with:
+        path: |
+          .cache/cargo/registry/index
+          .cache/cargo/registry/cache
+        key: index-${{ steps.rust-version.outputs.version }}-${{ hashFiles('Cargo.toml') }}
+        enableCrossOsArchive: true
     - name: Fetch deps
       run: cargo fetch --target ${{ matrix.target }}
       shell: bash
@@ -338,6 +358,7 @@ jobs:
       shell: bash
       env: ${{ matrix.custom_env }}
     - name: Test boring-sys cargo publish
+      if: "matrix.thing != 'i686-mingw' && matrix.thing != 'i686-msvc' && matrix.thing != 'x86_64-mingw'" # slowest builds
       # Running `cargo publish --dry-run` tests two things:
       #
       # 1. That `boring-sys` can build BoringSSL with just the files included