diff --git a/.ci/build.sh b/.ci/build.sh
index eedc67a6..5552244d 100644
--- a/.ci/build.sh
+++ b/.ci/build.sh
@@ -26,8 +26,8 @@ SCRIPT_DIR="$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
 #####################
 
 if [[ -f .ci/release-trigger.sh ]]; then
-   echo "Sourcing [.ci/release-trigger.sh]..."
-   source .ci/release-trigger.sh
+  echo "Sourcing [.ci/release-trigger.sh]..."
+  source .ci/release-trigger.sh
 fi
 
 cd $(dirname $0)/..
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 86b9ff58..8c8e27e3 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,29 +6,29 @@ updates:
   schedule:
     interval: weekly
     day: monday
-    time: "10:00"
+    time: "14:00"
   commit-message:
     prefix: ci
     prefix-development: ci
     include: scope
   labels:
-  - pinned
   - dependencies
   - gha
+  - pinned
 
 - package-ecosystem: maven
   directory: /
   schedule:
     interval: weekly
     day: monday
-    time: "10:00"
+    time: "14:00"
   commit-message:
     prefix: fix
     prefix-development: build
     include: scope
   labels:
-  - pinned
   - dependencies
   - mvn
+  - pinned
   ignore:
   - dependency-name: "co.leantechniques:maven-buildtime-extension"
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d49a8ace..f8f260a5 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -7,6 +7,8 @@
 name: Build
 
 on:
+  schedule:
+    - cron: '0 15 1 * *'
   push:
     branches-ignore:  # build all branches except:
     - 'dependabot/**'  # prevent GHA triggered twice (once for commit to the branch and once for opening/syncing the PR)
@@ -78,6 +80,10 @@ jobs:
       cancel-in-progress: false
 
 
+    permissions:
+      contents: write
+
+
     steps:
     - name: "Show: GitHub context"
       env:
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 39317012..c4dd70ea 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -3,12 +3,11 @@ name: Stale issues
 
 on:
   schedule:
-    - cron: '0 16 * * 1'
+    - cron: '0 15 1,15 * *'
   workflow_dispatch:
     # https://github.blog/changelog/2020-07-06-github-actions-manual-triggers-with-workflow_dispatch/
 
 permissions:
-  contents: write # only for delete-branch option
   issues: write
   pull-requests: write
 
@@ -23,7 +22,6 @@ jobs:
     - name: Run stale action
       uses: actions/stale@v9  # https://github.com/actions/stale
       with:
-        repo-token: ${{ secrets.GITHUB_TOKEN }}
         days-before-stale: 90
         days-before-close: 14
         stale-issue-message: >
@@ -38,10 +36,9 @@ jobs:
           pinned
           security
 
-    - name: Run stale action
+    - name: Run stale action (for enhancements)
       uses: actions/stale@v9  # https://github.com/actions/stale
       with:
-        repo-token: ${{ secrets.GITHUB_TOKEN }}
         days-before-stale: 360
         days-before-close: 14
         stale-issue-message: >
diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
index 7035167b..de042482 100644
--- a/CODE_OF_CONDUCT.md
+++ b/CODE_OF_CONDUCT.md
@@ -60,7 +60,7 @@ representative at an online or offline event.
 
 Instances of abusive, harassing, or otherwise unacceptable behavior may be
 reported to the community leaders responsible for enforcement at
-https://vegardit.com/en/legal/
+https://vegardit.com/legal/
 All complaints will be reviewed and investigated promptly and fairly.
 
 All community leaders are obligated to respect the privacy and security of the
diff --git a/pom.xml b/pom.xml
index a2b25163..a3da8338 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1,15 +1,17 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!--
-   SPDX-FileCopyrightText: © Vegard IT GmbH (https://vegardit.com)
-   SPDX-FileContributor: Sebastian Thomschke
-   SPDX-License-Identifier: Apache-2.0
-   SPDX-ArtifactOfProjectHomePage: https://github.com/vegardit/vegardit-maven-parent
-
-   check for new dependency/plugin updates using:
-      mvn -U -ntp versions:display-dependency-updates versions:display-plugin-updates
-   plugin announcements: https://blogs.apache.org/maven/
+SPDX-FileCopyrightText: © Vegard IT GmbH (https://vegardit.com)
+SPDX-FileContributor: Sebastian Thomschke
+SPDX-License-Identifier: Apache-2.0
+SPDX-ArtifactOfProjectHomePage: https://github.com/vegardit/vegardit-maven-parent
+
+plugin announcements: https://blogs.apache.org/maven/
+check for new dependency/plugin updates using:
+  mvn -U -ntp versions:display-dependency-updates versions:display-plugin-updates
 -->
-<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+   xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
 
    <modelVersion>4.0.0</modelVersion>