diff --git a/.github/workflows/pull_request_target.yml b/.github/workflows/pull_request_target.yml
new file mode 100644
index 0000000..cd1397e
--- /dev/null
+++ b/.github/workflows/pull_request_target.yml
@@ -0,0 +1,53 @@
+# ------------------------------------------------------------- #
+# Note: this file is automatically managed in template-template #
+# ------------------------------------------------------------- #
+
+on: pull_request_target
+
+name: pull_request_target
+
+jobs:
+  metadata:
+    runs-on: ubuntu-latest
+
+    outputs:
+      repository: ${{ steps.metadata.outputs.repository }}
+
+    steps:
+      - uses: actions/checkout@v2.3.4
+
+      - uses: ahmadnassri/action-metadata@v1
+        id: metadata
+
+  auto-merge:
+    timeout-minutes: 5
+
+    runs-on: ubuntu-latest
+
+    # only run for dependabot PRs
+    if: ${{ github.actor == 'dependabot[bot]' }}
+
+    steps:
+      - uses: ahmadnassri/action-dependabot-auto-merge@v2.4
+        with:
+          github-token: ${{ secrets.GH_TOKEN }}
+
+  template-sync:
+    needs: metadata
+
+    timeout-minutes: 20
+
+    runs-on: ubuntu-latest
+
+    # only run for templates
+    if: ${{ fromJSON(needs.metadata.outputs.repository).is_template }}
+
+    steps:
+      - uses: actions/checkout@v2.3.4
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}
+      - uses: ahmadnassri/action-workflow-queue@v1.1
+      - uses: ahmadnassri/action-template-repository-sync@v1.6.0
+      - uses: ahmadnassri/action-workflow-queue@v1.1
+        with:
+          github-token: ${{ secrets.GH_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b0140a2..0964986 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@v2
-      - uses: actions/cache@v2.1.6
+      - uses: actions/cache@v2.1.4
         with:
           path: /tmp/.buildx-cache
           key: buildx-${{ github.sha }}