diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 558b888..ca5fad4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ concurrency:
 jobs:
   read_msrv:
     name: Read MSRV
-    uses: actions-rust-lang/msrv/.github/workflows/msrv.yml@d3d2883c667da4f83d8af52be9f236ea3fcdd82c # v0.1.3
+    uses: actions-rust-lang/msrv/.github/workflows/msrv.yml@983d9d27da8fe8aaa47732160b7a14805004d4b2 # v0.1.3
 
   test:
     needs: read_msrv
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1f8f15b..be4e140 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -57,4 +57,4 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
           RELEASE_PLZ_RELEASES_JSON: ${{ steps.release-plz.outputs.releases }}
-        run: x52-update-release-notes
+        run: x52-update-release-notes --then-undraft
diff --git a/.release-plz.toml b/.release-plz.toml
index ee09107..404923c 100644
--- a/.release-plz.toml
+++ b/.release-plz.toml
@@ -2,6 +2,7 @@
 changelog_update = false
 dependencies_update = false
 pr_draft = true
+git_release_draft = true
 pr_labels = ["release"]
 publish_all_features = true
 git_tag_name = "{{ package }}-v{{ version }}"
diff --git a/flake.lock b/flake.lock
index 64d87c8..e116b97 100644
--- a/flake.lock
+++ b/flake.lock
@@ -66,11 +66,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1790183450,
-        "narHash": "sha256-fxr/3F+A6AwiKgwBfQTq6P68yNbX8IpwyXymIUK/TYk=",
+        "lastModified": 1791501778,
+        "narHash": "sha256-2HLxyAtbHUiTuVx4KCC4SIRZdcgnfpIjfOtjWULRN8o=",
         "owner": "x52dev",
         "repo": "nix",
-        "rev": "6339d8aee5af46835bb5c9b7e31f7a5712674c9a",
+        "rev": "cb0c45f9c706bd8b3f65dabb6a4e860d7afded8e",
         "type": "github"
       },
       "original": {