diff --git a/.git-blame-ignore-revs b/.git-blame-ignore-revs
new file mode 100644
index 000000000..e69de29bb
diff --git a/.github/workflows/devskim.yml b/.github/workflows/devskim.yml
index 2d5a0920f..bfcee3178 100644
--- a/.github/workflows/devskim.yml
+++ b/.github/workflows/devskim.yml
@@ -18,13 +18,11 @@ jobs:
     lint:
         name: DevSkim
         runs-on: ubuntu-latest
-        permissions:
-            actions: read
-            contents: read
-            security-events: write
         steps:
             - name: Checkout code
               uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Run DevSkim scanner
               uses: microsoft/DevSkim-Action@v1
diff --git a/.github/workflows/dotnet.yml b/.github/workflows/dotnet.yml
index a2b340205..7561459fc 100644
--- a/.github/workflows/dotnet.yml
+++ b/.github/workflows/dotnet.yml
@@ -21,6 +21,8 @@ jobs:
         steps:
             - name: Checkout
               uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Setup .NET environment
               uses: actions/setup-dotnet@v4
@@ -45,6 +47,8 @@ jobs:
         steps:
             - name: Checkout
               uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Setup dotnet
               uses: actions/setup-dotnet@v4
diff --git a/.github/workflows/elixir-sdk.yml b/.github/workflows/elixir-sdk.yml
index 4d8ad9064..dc5822e47 100644
--- a/.github/workflows/elixir-sdk.yml
+++ b/.github/workflows/elixir-sdk.yml
@@ -4,7 +4,7 @@ on:
     push:
         branches: ['main']
     pull_request:
-        types: [opened, reopened, synchronize, assigned, review_requested]
+        types: [opened, synchronize]
         paths:
             - 'sdk/highlight-ex/**'
             - '.github/workflows/elixir-sdk.yml'
@@ -21,6 +21,8 @@ jobs:
         steps:
             - name: Checkout
               uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
             - name: Setup Elixir
               uses: erlef/setup-beam@v1
               with:
@@ -36,6 +38,8 @@ jobs:
         steps:
             - name: Checkout
               uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
             - name: Setup Elixir
               uses: erlef/setup-beam@v1
               with:
@@ -56,6 +60,8 @@ jobs:
         steps:
             - name: Checkout
               uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
             - name: Setup Elixir
               uses: erlef/setup-beam@v1
               with:
diff --git a/.github/workflows/go-sdk.yml b/.github/workflows/go-sdk.yml
index 4f7ac6c44..3bb8678aa 100644
--- a/.github/workflows/go-sdk.yml
+++ b/.github/workflows/go-sdk.yml
@@ -4,7 +4,7 @@ on:
     push:
         branches: ['main']
     pull_request:
-        types: [opened, reopened, synchronize, assigned, review_requested]
+        types: [opened, synchronize]
         paths:
             - 'sdk/highlight-go/**'
             - '.github/workflows/go-sdk.yml'
@@ -17,6 +17,8 @@ jobs:
         steps:
             - name: Checkout
               uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
             - name: Setup Go
               uses: actions/setup-go@v5
               with:
@@ -34,6 +36,8 @@ jobs:
         steps:
             - name: Checkout
               uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
             - name: Setup Go
               uses: actions/setup-go@v5
               with:
@@ -52,6 +56,8 @@ jobs:
         steps:
             - name: Checkout
               uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
             - name: Setup Go
               uses: actions/setup-go@v5
               with:
@@ -67,6 +73,8 @@ jobs:
         steps:
             - name: Checkout
               uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
             - name: Setup Go
               uses: actions/setup-go@v5
               with:
diff --git a/.github/workflows/java-sdk.yml b/.github/workflows/java-sdk.yml
index 5a1d1f3e7..d828a67bf 100644
--- a/.github/workflows/java-sdk.yml
+++ b/.github/workflows/java-sdk.yml
@@ -17,14 +17,11 @@ on:
         branches: ['main']
         tags: ['sdk/highlight-java/**']
     pull_request:
-        types: [opened, reopened, synchronize, assigned, review_requested]
+        types: [opened, synchronize]
         paths:
             - 'sdk/highlight-java/**'
             - '.github/workflows/java-sdk.yml'
 
-permissions:
-    checks: write
-
 defaults:
     run:
         working-directory: ./sdk/highlight-java
@@ -43,7 +40,7 @@ jobs:
             - name: Checkout Code
               uses: actions/checkout@v4
               with:
-                  fetch-depth: 0
+                  token: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Deployment running
               id: deploy
@@ -104,7 +101,7 @@ jobs:
             - name: Checkout Code
               uses: actions/checkout@v4
               with:
-                  fetch-depth: 0
+                  token: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Set up JDK 17
               uses: actions/setup-java@v4
@@ -135,7 +132,7 @@ jobs:
             - name: Checkout Code
               uses: actions/checkout@v4
               with:
-                  fetch-depth: 0
+                  token: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Set up JDK 17
               uses: actions/setup-java@v4
@@ -172,7 +169,7 @@ jobs:
             - name: Checkout Code
               uses: actions/checkout@v4
               with:
-                  fetch-depth: 0
+                  token: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Set up JDK 17
               uses: actions/setup-java@v4
diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index 7dbefdcce..849603d98 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -20,6 +20,8 @@ jobs:
                 working-directory: ./sdk/highlight-py
         steps:
             - uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
             - name: Install poetry
               run: pipx install poetry
             - uses: actions/setup-python@v4
@@ -60,6 +62,8 @@ jobs:
 
         steps:
             - uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
             - name: Install poetry
               run: pipx install poetry
             - uses: actions/setup-python@v4
diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
index 6439e1e06..19b8e3569 100644
--- a/.github/workflows/ruby.yml
+++ b/.github/workflows/ruby.yml
@@ -16,12 +16,14 @@ jobs:
         runs-on: ubuntu-latest
         strategy:
             matrix:
-                ruby: ['3.0', '3.3']
+                ruby: ['3.1', '3.3']
         defaults:
             run:
                 working-directory: ./sdk/highlight-ruby/highlight
         steps:
             - uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
             - uses: dorny/paths-filter@v2
               id: filter
               with:
@@ -58,6 +60,8 @@ jobs:
                 working-directory: ./e2e/ruby/rails/demo
         steps:
             - uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
             - name: Install Ruby
               uses: ruby/setup-ruby@v1
               with:
@@ -77,6 +81,8 @@ jobs:
                 working-directory: ./e2e/ruby/rails/api-only
         steps:
             - uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
             - name: Install Ruby
               uses: ruby/setup-ruby@v1
               with:
diff --git a/.github/workflows/rust-sdk.yml b/.github/workflows/rust-sdk.yml
index 6a1416aba..6ca7ba08b 100644
--- a/.github/workflows/rust-sdk.yml
+++ b/.github/workflows/rust-sdk.yml
@@ -4,14 +4,11 @@ on:
     push:
         branches: ['main']
     pull_request:
-        types: [opened, reopened, synchronize, assigned, review_requested]
+        types: [opened, synchronize]
         paths:
             - 'sdk/highlight-rust/**'
             - '.github/workflows/rust-sdk.yml'
 
-permissions:
-    checks: write
-
 defaults:
     run:
         working-directory: ./sdk/highlight-rust
@@ -29,7 +26,7 @@ jobs:
             - name: Checkout Code
               uses: actions/checkout@v4
               with:
-                  fetch-depth: 0
+                  token: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Install Rust toolchain
               uses: actions-rs/toolchain@v1
@@ -53,7 +50,7 @@ jobs:
             - name: Checkout Code
               uses: actions/checkout@v4
               with:
-                  fetch-depth: 0
+                  token: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Install Rust toolchain
               uses: actions-rs/toolchain@v1
diff --git a/.github/workflows/turbo.yml b/.github/workflows/turbo.yml
index a980c47f5..89e2aff48 100644
--- a/.github/workflows/turbo.yml
+++ b/.github/workflows/turbo.yml
@@ -22,7 +22,6 @@ jobs:
               with:
                   token: ${{ secrets.SUBMODULE_PAT }}
                   submodules: recursive
-                  fetch-depth: 0
 
             # automatically caches dependencies based on yarn.lock
             - name: Setup Node.js environment