diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 9ce426e..120f8c7 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -3,8 +3,7 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "weekly"
-      day: "friday"
+      interval: "daily"
     open-pull-requests-limit: 2          # <- default is 5
     groups:                              # <- group all github actions updates in a single PR
       # 1. development-dependencies are auto-merged
@@ -29,8 +28,7 @@ updates:
     # 4. other dependencies require a manual merge
     directory: "/"
     schedule:
-      interval: "weekly"
-      day: "friday"
+      interval: "daily"
     open-pull-requests-limit: 4
     groups:
       development-dependencies:
diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
index 28975e6..514dfc6 100644
--- a/.github/workflows/contributors.yml
+++ b/.github/workflows/contributors.yml
@@ -81,5 +81,6 @@ jobs:
         name: Auto-approve PR
         run: gh pr review --approve "$PR_URL"
       -
+        # TODO: should wait for all workflows to complete before merging
         name: Auto-merge PR
         run: gh pr merge --auto --rebase "$PR_URL"
diff --git a/README.md b/README.md
index 490a56a..0395875 100644
--- a/README.md
+++ b/README.md
@@ -45,14 +45,14 @@ on:
 
 jobs:
   test:
-    uses: go-openapi/ci-workflow/.github/workflows/go-test.yml@master
+    uses: go-openapi/ci-workflows/.github/workflows/go-test.yml@master
     secrets: inherit
 ```
 
 It is recommended to pin the git ref `master` with a commit sha, and let dependabot keep you up to date. Like so:
 
 ```yaml
-    uses: go-openapi/ci-workflow/.github/workflows/go-test.yml@b28a8b978a5ee5b7f4241ffafd6cc6163edb5dfd # v0.1.0
+    uses: go-openapi/ci-workflows/.github/workflows/go-test.yml@b28a8b978a5ee5b7f4241ffafd6cc6163edb5dfd # v0.1.0
 ```
 
 ### Permissions