diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f63f9bc..2a14358 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,6 +1,8 @@
 version: 2
 updates:
   - package-ecosystem: 'github-actions'
+    commit-message:
+      prefix: '🐈 '
     directory: '/'
     schedule:
       interval: 'weekly'
@@ -13,6 +15,8 @@ updates:
           - 'minor'
           - 'patch'
   - package-ecosystem: 'gomod'
+    commit-message:
+      prefix: '🐹 '
     directory: '/'
     schedule:
       interval: 'weekly'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8e71405..b5c66ee 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,8 @@ permissions:
 jobs:
   test:
     uses: ./.github/workflows/test.yml
-    secrets: inherit
+    secrets:
+      BINARYLANE_API_TOKEN: ${{ secrets.BINARYLANE_API_TOKEN }}
 
   goreleaser:
     needs: test
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 6bc7585..95a1aca 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -6,10 +6,14 @@ on:
       - '.github/workflows/test.yml'
       - '**.go'
   workflow_call:
+    secrets:
+      BINARYLANE_API_TOKEN:
+        required: true
 
 permissions:
   # Permission for checking out code
   contents: read
+  cancel-in-progress: true # would be nice if GH offered cancel-pending instead, https://github.com/orgs/community/discussions/63136
 
 jobs:
   acceptance: