diff --git a/.github/workflows/cloudflare-web-deploy.yml b/.github/workflows/cloudflare-web-deploy.yml
index 819851b0..83f7f836 100644
--- a/.github/workflows/cloudflare-web-deploy.yml
+++ b/.github/workflows/cloudflare-web-deploy.yml
@@ -9,7 +9,7 @@ on:
       - '.github/actions/setup/**'
   push:
     tags:
-      - 'sable/v*'
+      - 'v*'
   workflow_dispatch:
 
 env:
diff --git a/.github/workflows/prepare-release.yml b/.github/workflows/prepare-release.yml
index cfd494af..7c1ed73f 100644
--- a/.github/workflows/prepare-release.yml
+++ b/.github/workflows/prepare-release.yml
@@ -14,10 +14,18 @@ jobs:
       contents: write
       pull-requests: write
     steps:
+      - name: Generate bot token
+        id: generate-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.APP_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
           persist-credentials: true
+          token: ${{ steps.generate-token.outputs.token }}
 
       - uses: fregante/setup-git-user@024bc0b8e177d7e77203b48dab6fb45666854b35 # v2.0.2
 
@@ -28,12 +36,12 @@ jobs:
       - name: Prepare Release
         run: knope prepare-release --verbose
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
 
       - name: Enrich changelog and update release PR
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          github-token: ${{ steps.generate-token.outputs.token }}
           script: |
             const fs = require("fs");
             const { owner, repo } = context.repo;