diff --git a/.github/workflows/changelog.yaml b/.github/workflows/changelog.yaml
new file mode 100644
index 000000000000..cfd5cc44f34b
--- /dev/null
+++ b/.github/workflows/changelog.yaml
@@ -0,0 +1,51 @@
+name: Changelog Generator
+
+on:
+  schedule:
+    - cron: 0 0 * * 1,4
+  push:
+    tags:
+      - '*.*.*'
+
+jobs:
+  changelog:
+    name: Changelog Generator
+    runs-on: ubuntu-22.04
+    timeout-minutes: 30
+
+    steps:
+      - uses: actions/checkout@v4
+        if: github.event_name == 'push' && github.ref_type == 'tag'
+      - name: Create release
+        run: |-
+          if [[ ${{ github.ref_name }} =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            gh release create ${{ github.ref_name }} --generate-notes || true
+          fi
+        if: github.event_name == 'push' && github.ref_type == 'tag'
+        env:
+          GH_TOKEN: ${{ secrets.GOPASS_CI_GITHUB_TOKEN }}
+
+      - name: Get Date
+        id: get-date
+        run: echo "date=$(/bin/date -u "+%Y%m%d%H%M%S")" >> $GITHUB_OUTPUT
+      - uses: actions/cache@v3
+        with:
+          path: .cache
+          key: automation-${{ steps.get-date.outputs.date }}
+          restore-keys: |+
+            automation-
+
+      - run: docker pull aeonphp/automation
+      - name: Generate changelog
+        run: >-
+          docker run --env=AEON_AUTOMATION_GH_TOKEN --rm --volume=$(pwd)/.cache:/cache aeonphp/automation
+          changelog:generate:all
+          ${{ github.repository }}
+          --github-release-update
+          --cache-path=/cache
+          --skip-from=dependabot-preview[bot]
+          --skip-from=dependabot[bot]
+          --skip-from=renovate[bot]
+          -v
+        env:
+          AEON_AUTOMATION_GH_TOKEN: ${{ secrets.GOPASS_CI_GITHUB_TOKEN }}
diff --git a/.github/workflows/dependency-auto-review.yaml b/.github/workflows/dependency-auto-review.yaml
index d09719021d91..8a0eb528e907 100644
--- a/.github/workflows/dependency-auto-review.yaml
+++ b/.github/workflows/dependency-auto-review.yaml
@@ -11,6 +11,7 @@ jobs:
     name: Auto reviews updates
     runs-on: ubuntu-22.04
     timeout-minutes: 5
+    if: github.event.pull_request.user.login == 'renovate[bot]'
 
     steps:
       - uses: actions/github-script@v6
@@ -22,4 +23,3 @@ jobs:
               pull_number: context.payload.pull_request.number,
               event: 'APPROVE',
             })
-    if: github.event.pull_request.user.login == 'renovate[bot]'
diff --git a/.github/workflows/pr-checks.yaml b/.github/workflows/pr-checks.yaml
index 9bef144dfc59..5a0ec4b417e2 100644
--- a/.github/workflows/pr-checks.yaml
+++ b/.github/workflows/pr-checks.yaml
@@ -15,6 +15,7 @@ jobs:
     name: Pull request check
     runs-on: ubuntu-22.04
     timeout-minutes: 5
+    if: github.event.pull_request.user.login != 'renovate[bot]'
 
     steps:
       - run: pip install --upgrade attrs