diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index cb777e0a4..e66862be6 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -12,11 +12,10 @@ on:
 
 permissions:
   actions: read
-  contents: write
-  pull-requests: read
+  contents: read
   packages: read
   security-events: write
 
 jobs:
   workflows:
-    uses: hassio-addons/workflows/.github/workflows/app-ci.yaml@3846ae0fd09acec8ac1ac308ceacd052b9d01bec # v2.0.6
+    uses: hassio-addons/workflows/.github/workflows/app-ci.yaml@383c10d83acbe341acbb35a4a61bfd14827f00f0 # v3.0.0
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index df7dedf15..15cc89d6d 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -16,17 +16,16 @@ jobs:
   ci:
     permissions:
       actions: read
-      contents: write
-      pull-requests: read
+      contents: read
       packages: read
       security-events: write
-    uses: hassio-addons/workflows/.github/workflows/app-ci.yaml@3846ae0fd09acec8ac1ac308ceacd052b9d01bec # v2.0.6
+    uses: hassio-addons/workflows/.github/workflows/app-ci.yaml@383c10d83acbe341acbb35a4a61bfd14827f00f0 # v3.0.0
 
   deploy:
     needs: ci
     permissions:
       contents: read
       packages: write
-    uses: hassio-addons/workflows/.github/workflows/app-deploy.yaml@3846ae0fd09acec8ac1ac308ceacd052b9d01bec # v2.0.6
+    uses: hassio-addons/workflows/.github/workflows/app-deploy.yaml@383c10d83acbe341acbb35a4a61bfd14827f00f0 # v3.0.0
     secrets:
       DISPATCH_TOKEN: ${{ secrets.DISPATCH_TOKEN }}
diff --git a/.github/workflows/labels.yaml b/.github/workflows/labels.yaml
index 378b04685..f00a8f016 100644
--- a/.github/workflows/labels.yaml
+++ b/.github/workflows/labels.yaml
@@ -12,4 +12,4 @@ permissions:
 
 jobs:
   workflows:
-    uses: hassio-addons/workflows/.github/workflows/labels.yaml@3846ae0fd09acec8ac1ac308ceacd052b9d01bec # v2.0.6
+    uses: hassio-addons/workflows/.github/workflows/labels.yaml@383c10d83acbe341acbb35a4a61bfd14827f00f0 # v3.0.0
diff --git a/.github/workflows/lock.yaml b/.github/workflows/lock.yaml
index 61a93cc02..96268b8c7 100644
--- a/.github/workflows/lock.yaml
+++ b/.github/workflows/lock.yaml
@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   workflows:
-    uses: hassio-addons/workflows/.github/workflows/lock.yaml@3846ae0fd09acec8ac1ac308ceacd052b9d01bec # v2.0.6
+    uses: hassio-addons/workflows/.github/workflows/lock.yaml@383c10d83acbe341acbb35a4a61bfd14827f00f0 # v3.0.0
diff --git a/.github/workflows/pr-labels.yaml b/.github/workflows/pr-labels.yaml
index 57a0e9e70..508e37885 100644
--- a/.github/workflows/pr-labels.yaml
+++ b/.github/workflows/pr-labels.yaml
@@ -14,4 +14,4 @@ permissions: {}
 
 jobs:
   workflows:
-    uses: hassio-addons/workflows/.github/workflows/pr-labels.yaml@3846ae0fd09acec8ac1ac308ceacd052b9d01bec # v2.0.6
+    uses: hassio-addons/workflows/.github/workflows/pr-labels.yaml@383c10d83acbe341acbb35a4a61bfd14827f00f0 # v3.0.0
diff --git a/.github/workflows/release-drafter.yaml b/.github/workflows/release-drafter.yaml
new file mode 100644
index 000000000..7e3b16110
--- /dev/null
+++ b/.github/workflows/release-drafter.yaml
@@ -0,0 +1,16 @@
+---
+name: Release Drafter
+
+# yamllint disable-line rule:truthy
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: write
+  pull-requests: read
+
+jobs:
+  workflows:
+    uses: hassio-addons/workflows/.github/workflows/release-drafter.yaml@383c10d83acbe341acbb35a4a61bfd14827f00f0 # v3.0.0
diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml
index 788953d90..5b363797c 100644
--- a/.github/workflows/stale.yaml
+++ b/.github/workflows/stale.yaml
@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   workflows:
-    uses: hassio-addons/workflows/.github/workflows/stale.yaml@3846ae0fd09acec8ac1ac308ceacd052b9d01bec # v2.0.6
+    uses: hassio-addons/workflows/.github/workflows/stale.yaml@383c10d83acbe341acbb35a4a61bfd14827f00f0 # v3.0.0