diff --git a/.cirrus.yml b/.cirrus.yml
index 1250dacb..02cc023b 100644
--- a/.cirrus.yml
+++ b/.cirrus.yml
@@ -1,9 +1,9 @@
-only_if: changesInclude('.cirrus.yml') || ($CIRRUS_BRANCH == "main" && !changesIncludeOnly('docs/*', '.pre-commit-config.yaml')) || $CIRRUS_BRANCH =~ 'cirrus.*'
+only_if: changesInclude('.cirrus.yml') || ($CIRRUS_BRANCH == "main" && !changesIncludeOnly('.github/*', 'bin/*', 'docs/*', '.circleci/*', '.travis.yml', '.pre-commit-config.yaml', '.readthedocs.yml', 'azure-pipelines.yml', 'README.md', 'mkdocs.yml', 'noxfile.py')) || $CIRRUS_BRANCH =~ 'cirrus.*'
 
 run_tests: &RUN_TESTS
   install_cibuildwheel_script:
-    - python -m pip install dependency-groups
-    - python -m dependency_groups test | xargs python -m pip install -e.
+    - python -m pip install -U pip
+    - python -m pip install -e. --group test
   run_cibuildwheel_tests_script:
     - python ./bin/run_tests.py
 
@@ -55,9 +55,12 @@ windows_x86_task:
     memory: 8G
 
   install_pre_requirements_script:
+    - certutil -generateSSTFromWU roots.sst
+    - certutil -addstore -f root roots.sst
+    - del roots.sst
     - choco install -y --no-progress python3 --version 3.12.4
     - refreshenv
-    - echo PATH=%PATH% >> "%CIRRUS_ENV%"
+    - powershell -Command "$cleanPath = $env:PATH -replace ';+$', ''; Add-Content -Path $env:CIRRUS_ENV -Value ('PATH=' + $cleanPath)"
   <<: *RUN_TESTS
 
 macos_arm64_task:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 684c76cf..edc55f02 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,8 +12,19 @@ on:
       - reopened
       - labeled
     paths-ignore:
-      - 'docs/**'
+      - .ci*
+      - bin/*
+      - docs/**
+      - examples/azure-pipelines-*
+      - examples/ci*
+      - examples/travis-ci-*
       - .pre-commit-config.yaml
+      - .readthedocs.yml
+      - .travis.yml
+      - README.md
+      - azure-pipelines.yml
+      - mkdocs.yml
+      - noxfile.py
   workflow_dispatch:
     # allow manual runs on branches without a PR
 
diff --git a/azure-pipelines.yml b/azure-pipelines.yml
index b19c516e..5c244ac7 100644
--- a/azure-pipelines.yml
+++ b/azure-pipelines.yml
@@ -1,8 +1,19 @@
 pr:
   paths:
     exclude:
-      - docs/*
+      - .github/**
+      - bin/*
+      - docs/**
+      - examples/github-*
+      - examples/ci*
+      - examples/travis-ci-*
+      - .ci*
       - .pre-commit-config.yaml
+      - .readthedocs.yml
+      - .travis.yml
+      - README.md
+      - mkdocs.yml
+      - noxfile.py
 
 jobs:
 - job: linux_311
diff --git a/examples/cirrus-ci-minimal.yml b/examples/cirrus-ci-minimal.yml
index f07686e6..d5a934c9 100644
--- a/examples/cirrus-ci-minimal.yml
+++ b/examples/cirrus-ci-minimal.yml
@@ -52,9 +52,13 @@ windows_x86_task:
     memory: 4G
 
   install_pre_requirements_script:
+    - certutil -generateSSTFromWU roots.sst
+    - certutil -addstore -f root roots.sst
+    - del roots.sst
     - choco install -y --no-progress python3 --version 3.12.4
     - refreshenv
-    - echo PATH=%PATH% >> "%CIRRUS_ENV%"
+    - powershell -Command "$cleanPath = $env:PATH -replace ';+$', ''; Add-Content -Path $env:CIRRUS_ENV -Value ('PATH=' + $cleanPath)"
+
   <<: *BUILD_AND_STORE_WHEELS
 
 macos_arm64_task:
diff --git a/test/test_ssl.py b/test/test_ssl.py
index e4ff24e9..0ea958ba 100644
--- a/test/test_ssl.py
+++ b/test/test_ssl.py
@@ -1,3 +1,4 @@
+import socket
 import textwrap
 
 from . import test_projects, utils
@@ -24,6 +25,9 @@ def test(tmp_path):
     project_dir = tmp_path / "project"
     project_with_ssl_tests.generate(project_dir)
 
+    # warm up connection
+    socket.getaddrinfo("tls-v1-2.badssl.com", 443)
+
     actual_wheels = utils.cibuildwheel_run(project_dir)
 
     expected_wheels = utils.expected_wheels("spam", "0.1.0")