diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
index 17f203d31..93a8c6381 100644
--- a/.github/workflows/ruby.yml
+++ b/.github/workflows/ruby.yml
@@ -25,6 +25,32 @@ jobs:
     - name: Run RuboCop
       run: bundle exec rubocop
 
+  assets-precompile:
+    name: 'Assets Precompile'
+    runs-on: ubuntu-latest
+    env:
+      RAILS_ENV: production
+      # The task boots the app but never connects to a database; the URL only
+      # needs to resolve to a configured adapter. Initializers run at boot read
+      # PLANNER_SECRET (config/initializers/secret_token.rb) and AWS
+      # credentials (config/initializers/carrier_wave.rb); nothing connects to
+      # S3 during precompile, so fake values are enough.
+      DATABASE_URL: postgres://u:p@localhost:5432/planner_placeholder
+      PLANNER_SECRET: fake
+      AWS_ACCESS_KEY: fake
+      AWS_SECRET_ACCESS_KEY: fake
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v7
+
+    - name: Set up Ruby
+      uses: ruby/setup-ruby@v1
+      with:
+        bundler-cache: true
+
+    - name: Precompile assets
+      run: bundle exec rake assets:precompile
+
   test:
     name: 'Tests (Group ${{ matrix.ci_node_index }})'
     runs-on: ubuntu-latest
diff --git a/Gemfile.lock b/Gemfile.lock
index 8306e5cdb..857666c85 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -190,7 +190,8 @@ GEM
       activemodel
     erb (6.0.7)
     erubi (1.13.1)
-    execjs (2.10.1)
+    execjs (2.10.2)
+      json (>= 2)
     fabrication (2.31.0)
     faker (3.8.0)
       i18n (>= 1.8.11, < 2)
@@ -788,7 +789,7 @@ CHECKSUMS
   email_validator (2.2.4) sha256=5ab238095bec7aef9389f230e9e0c64c5081cdf91f19d6c5cecee0a93af20604
   erb (6.0.7) sha256=c5ca6dc25b0ef974a44dc8f59fe847577122483b1968a38dec305c60bf91ee92
   erubi (1.13.1) sha256=a082103b0885dbc5ecf1172fede897f9ebdb745a4b97a5e8dc63953db1ee4ad9
-  execjs (2.10.1) sha256=abe0ae028467eb8e30c10814eb934d07876a691aae7e803d813b7ce5a75e73f1
+  execjs (2.10.2) sha256=466cf2b49e50c0cfdff8fdb88a7a983dfab7ac0f6185c317ccb434a75c224c88
   fabrication (2.31.0) sha256=2c79f10d1b88034a2ebd47ce77acba66847fc4636581c8282b3408adc68e85aa
   faker (3.8.0) sha256=c147b308df73a90f27a4fc84f18d4c22ef0ad9c2a64b2b61c86fd0ca71753efc
   faraday (2.14.4) sha256=9bb4408c44621b0dbaaaa39e5dbfc4dbe58cc6751b6eb94d16ae9e1f2f2fab6e