diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index aebd351c0..136c047d0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,6 +14,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - uses: pnpm/action-setup@v2
         with:
diff --git a/renovate.json b/renovate.json
index db6cc8c2c..29b296af5 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,6 +1,7 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": ["config:base"],
+  "semanticCommits": "enabled",
   "pip-compile": {
     "fileMatch": ["(^|/)requirements\\.in$"]
   },