diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 928614874..495846fa7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,6 +1,12 @@
 name: ci
 
-on: [pull_request, push]
+on:
+  pull_request:
+  push:
+    branches-ignore:
+      - deps/*
+    tags:
+      - '**'
 
 permissions:
   contents: write
diff --git a/.github/workflows/update_dep.yml b/.github/workflows/update_dep.yml
index 65d0a1cf4..76daf27f4 100644
--- a/.github/workflows/update_dep.yml
+++ b/.github/workflows/update_dep.yml
@@ -28,6 +28,7 @@ jobs:
         commit-message: "fix(ignore): update ${{ github.event.client_payload.package }} to ${{ github.event.client_payload.version }}"
         branch: "deps/${{ github.event.client_payload.package }}"
         title: Update ${{ github.event.client_payload.package }} to ${{ github.event.client_payload.version }}
+        token: ${{ secrets.GH_TOKEN }}
     - run: sleep 5 # Otherwise pull request may not exist yet causing automerge to fail
     - uses: peter-evans/enable-pull-request-automerge@v3
       if: steps.cpr.outputs.pull-request-operation == 'created'