diff --git a/.github/workflows/dependency-auto-review.yaml b/.github/workflows/dependency-auto-review.yaml
index d09719021..8a0eb528e 100644
--- a/.github/workflows/dependency-auto-review.yaml
+++ b/.github/workflows/dependency-auto-review.yaml
@@ -11,6 +11,7 @@ jobs:
     name: Auto reviews updates
     runs-on: ubuntu-22.04
     timeout-minutes: 5
+    if: github.event.pull_request.user.login == 'renovate[bot]'
 
     steps:
       - uses: actions/github-script@v6
@@ -22,4 +23,3 @@ jobs:
               pull_number: context.payload.pull_request.number,
               event: 'APPROVE',
             })
-    if: github.event.pull_request.user.login == 'renovate[bot]'
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index d1bcf6a4d..198046a2a 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -11,13 +11,17 @@ on:
       - 'example-project/**'
   pull_request:
 
+permissions:
+  actions: write
+  contents: write
+
 env:
   HAS_SECRETS: ${{ secrets.HAS_SECRETS }}
 
 jobs:
   main:
-    runs-on: ubuntu-22.04
     name: Continuous integration
+    runs-on: ubuntu-22.04
     timeout-minutes: 10
     if: "!startsWith(github.event.head_commit.message, '[skip ci] ')"
 
@@ -74,9 +78,21 @@ jobs:
           && github.event_name == 'push'
           && ( github.ref_type == 'tag' || github.ref_name == 'master' )
 
+      - name: Trigger changelog workflow
+        uses: actions/github-script@v7
+        with:
+          script: |-
+            if (process.env.GITHUB_REF_TYPE == 'tag') {
+                console.log('Trigger changelog');
+                await github.rest.repos.createDispatchEvent({
+                    owner: 'camptocamp',
+                    repo: 'helm-mutualize',
+                    event_type: 'changelog',
+                });
+            }
   k8s:
-    runs-on: ubuntu-22.04
     name: Kubernetes
+    runs-on: ubuntu-22.04
     timeout-minutes: 20
     if: "!startsWith(github.event.head_commit.message, '[skip ci] ')"
 
diff --git a/.github/workflows/pr-checks.yaml b/.github/workflows/pr-checks.yaml
index ed1ff840d..a3838fc3d 100644
--- a/.github/workflows/pr-checks.yaml
+++ b/.github/workflows/pr-checks.yaml
@@ -18,6 +18,7 @@ jobs:
     name: Pull request check
     runs-on: ubuntu-22.04
     timeout-minutes: 5
+    if: github.event.pull_request.user.login != 'renovate[bot]'
 
     steps:
       - run: pip install --upgrade attrs
diff --git a/ci/config.yaml b/ci/config.yaml
index 211def171..7c76660db 100644
--- a/ci/config.yaml
+++ b/ci/config.yaml
@@ -1,4 +1,4 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/camptocamp/c2cciutils/1.2.14/c2cciutils/schema.json
+# yaml-language-server: $schema=https://raw.githubusercontent.com/camptocamp/c2cciutils/1.2/c2cciutils/schema.json
 
 publish:
   pypi: