diff --git a/.github/workflows/cve-scan.yml b/.github/workflows/cve-scan.yml
index add92f0..73c079b 100644
--- a/.github/workflows/cve-scan.yml
+++ b/.github/workflows/cve-scan.yml
@@ -2,6 +2,8 @@ name: CVE Scan
 
 on:
   push:
+    branches: ["main"]
+    tags: ["**"]
   pull_request:
     types:
       - opened
diff --git a/.github/workflows/renovatebot.yml b/.github/workflows/renovatebot.yml
index 96016c7..e474200 100644
--- a/.github/workflows/renovatebot.yml
+++ b/.github/workflows/renovatebot.yml
@@ -22,7 +22,7 @@ jobs:
           fetch-depth: 1
 
       - name: Run renovatebot
-        uses: renovatebot/github-action@v40.2.4
+        uses: renovatebot/github-action@v40.2.5
         env:
           RENOVATE_GIT_PRIVATE_KEY: ${{ secrets.GPG_SIGNING_KEY }}
           RENOVATE_REPOSITORIES: "robert-koch-institut/mex-template"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6e0e339..239c9fd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,7 +15,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Changes
 
 - use new --frozen-lockfile instead of deprecated --no-lock
-- update ruff and mypy versions
+- update project requirements, github actions and dependencies
+- prevent duplicate github pipelines for test, cve and lint
 
 ### Deprecated
 
diff --git a/mex-{{ cookiecutter.project_name }}/.github/workflows/cve-scan.yml b/mex-{{ cookiecutter.project_name }}/.github/workflows/cve-scan.yml
index 0ece42c..81a464b 100644
--- a/mex-{{ cookiecutter.project_name }}/.github/workflows/cve-scan.yml	
+++ b/mex-{{ cookiecutter.project_name }}/.github/workflows/cve-scan.yml	
@@ -2,6 +2,8 @@ name: CVE Scan
 
 on:
   push:
+    branches: ["main"]
+    tags: ["**"]
   pull_request:
     types:
       - opened
diff --git a/mex-{{ cookiecutter.project_name }}/.github/workflows/linting.yml b/mex-{{ cookiecutter.project_name }}/.github/workflows/linting.yml
index 4859d99..97cdcfa 100644
--- a/mex-{{ cookiecutter.project_name }}/.github/workflows/linting.yml	
+++ b/mex-{{ cookiecutter.project_name }}/.github/workflows/linting.yml	
@@ -2,6 +2,8 @@ name: Linting
 
 on:
   push:
+    branches: ["main"]
+    tags: ["**"]
   pull_request:
     types:
       - opened
diff --git a/mex-{{ cookiecutter.project_name }}/.github/workflows/release.yml b/mex-{{ cookiecutter.project_name }}/.github/workflows/release.yml
index b789059..2222338 100644
--- a/mex-{{ cookiecutter.project_name }}/.github/workflows/release.yml	
+++ b/mex-{{ cookiecutter.project_name }}/.github/workflows/release.yml	
@@ -90,7 +90,7 @@ jobs:
     needs: release
     steps:
       - name: Build, tag and push docker image to ghcr
-        uses: GlueOps/github-actions-build-push-containers@v0.4.4
+        uses: GlueOps/github-actions-build-push-containers@v0.4.5
         with:
           {% raw %}tags: "${{ github.sha }},${{ needs.release.outputs.tag }},latest"{% endraw %}
 
diff --git a/mex-{{ cookiecutter.project_name }}/.github/workflows/renovatebot.yml b/mex-{{ cookiecutter.project_name }}/.github/workflows/renovatebot.yml
index 6f328c0..b1ed808 100644
--- a/mex-{{ cookiecutter.project_name }}/.github/workflows/renovatebot.yml	
+++ b/mex-{{ cookiecutter.project_name }}/.github/workflows/renovatebot.yml	
@@ -22,7 +22,7 @@ jobs:
           fetch-depth: 1
 
       - name: Run renovatebot
-        uses: renovatebot/github-action@v40.2.4
+        uses: renovatebot/github-action@v40.2.5
         env:
           RENOVATE_GIT_PRIVATE_KEY: {% raw %}${{ secrets.GPG_SIGNING_KEY }}{% endraw %}
           RENOVATE_REPOSITORIES: "robert-koch-institut/mex-{{ cookiecutter.project_name }}"
diff --git a/mex-{{ cookiecutter.project_name }}/.github/workflows/testing.yml b/mex-{{ cookiecutter.project_name }}/.github/workflows/testing.yml
index cfa4046..8468de4 100644
--- a/mex-{{ cookiecutter.project_name }}/.github/workflows/testing.yml	
+++ b/mex-{{ cookiecutter.project_name }}/.github/workflows/testing.yml	
@@ -2,6 +2,8 @@ name: Testing
 
 on:
   push:
+    branches: ["main"]
+    tags: ["**"]
   pull_request:
     types:
       - opened
diff --git a/mex-{{ cookiecutter.project_name }}/requirements.txt b/mex-{{ cookiecutter.project_name }}/requirements.txt
index bcaf982..d35daa4 100644
--- a/mex-{{ cookiecutter.project_name }}/requirements.txt	
+++ b/mex-{{ cookiecutter.project_name }}/requirements.txt	
@@ -2,4 +2,4 @@ cruft==2.15.0
 mex-release @ git+https://github.com/robert-koch-institut/mex-release.git
 pdm==2.17.3
 pre-commit==3.8.0
-wheel==0.43.0
+wheel==0.44.0
diff --git a/requirements.txt b/requirements.txt
index bcaf982..d35daa4 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,4 +2,4 @@ cruft==2.15.0
 mex-release @ git+https://github.com/robert-koch-institut/mex-release.git
 pdm==2.17.3
 pre-commit==3.8.0
-wheel==0.43.0
+wheel==0.44.0