diff --git a/.github/actions/bump-casks/action.yml b/.github/actions/bump-casks/action.yml
index 50800825..e70e007a 100644
--- a/.github/actions/bump-casks/action.yml
+++ b/.github/actions/bump-casks/action.yml
@@ -14,7 +14,11 @@ runs:
       env:
         HOMEBREW_GITHUB_API_TOKEN: ${{ inputs.HOMEBREW_GITHUB_API_TOKEN }}
       shell: bash
+      # https://docs.github.com/en/rest/using-the-rest-api/rate-limits-for-the-rest-api?apiVersion=2022-11-28#primary-rate-limit-for-authenticated-users
+      # Github Actions: 5000 requests per hour
+      # 1 * 60 * 24 = 1440 (because bump-pr will checkout a new branch and push to remote)
+      # 1 concurrent parallel jobs, 1 second delay between jobs.
       run: |
-        parallel -j0 --group --halt now,fail=1 \
-          './.github/actions/bump-casks/script.sh {}' \
+        parallel -j1 --delay 1s --group --halt now,fail=1 \
+          "./.github/actions/bump-casks/script.sh {}" \
           ::: $(ls $(brew --repository brewforge/chinese)/Casks/*.rb | xargs -I {} basename {} .rb)
diff --git a/.github/actions/bump-casks/script.sh b/.github/actions/bump-casks/script.sh
index 4a58d310..c153ff39 100755
--- a/.github/actions/bump-casks/script.sh
+++ b/.github/actions/bump-casks/script.sh
@@ -27,6 +27,7 @@ toV=${cleanCheck#*==>}
 
 echo "Updating $cask from $fromV to $toV"
 if [[ "$fromV" != "$toV" ]]; then
-  brew bump-cask-pr "$cask" --version "$toV" --verbose --force
+  brew bump-cask-pr "$cask" --version "$toV" \
+    --verbose --force --no-browse --fork-org Brewforge-Bot
 fi
 echo "Done for $cask"
diff --git a/.github/actions/bump-formulas/action.yml b/.github/actions/bump-formulas/action.yml
index e7077ec2..2fc2eda1 100644
--- a/.github/actions/bump-formulas/action.yml
+++ b/.github/actions/bump-formulas/action.yml
@@ -14,7 +14,11 @@ runs:
       env:
         HOMEBREW_GITHUB_API_TOKEN: ${{ inputs.HOMEBREW_GITHUB_API_TOKEN }}
       shell: bash
+      # https://docs.github.com/en/rest/using-the-rest-api/rate-limits-for-the-rest-api?apiVersion=2022-11-28#primary-rate-limit-for-authenticated-users
+      # Github Actions: 5000 requests per hour
+      # 1 * 60 * 24 = 1440 (because bump-pr will checkout a new branch and push to remote)
+      # 1 concurrent parallel jobs, 1 second delay between jobs.
       run: |
-        parallel -j0 --group --halt now,fail=1 \
-          './.github/actions/bump-formulas/script.sh {}' \
+        parallel -j1 --delay 1s --group --halt now,fail=1 \
+          "./.github/actions/bump-formulas/script.sh {}" \
           ::: $(ls $(brew --repository brewforge/chinese)/Formula/*.rb | xargs -I {} basename {} .rb)
diff --git a/.github/actions/bump-formulas/script.sh b/.github/actions/bump-formulas/script.sh
index 36c7870d..1dbce670 100755
--- a/.github/actions/bump-formulas/script.sh
+++ b/.github/actions/bump-formulas/script.sh
@@ -27,6 +27,7 @@ toV=${cleanCheck#*==>}
 
 echo "Updating $formula from $fromV to $toV"
 if [[ "$fromV" != "$toV" ]]; then
-  brew bump-formula-pr "$formula" --version "$toV" --verbose --force
+  brew bump-formula-pr "$formula" --version "$toV" \
+    --verbose --force --no-browse --fork-org Brewforge-Bot
 fi
 echo "Done for $formula"
diff --git a/.github/actions/homebrew-env/action.yml b/.github/actions/homebrew-env/action.yml
index 977d4d19..24a676a9 100644
--- a/.github/actions/homebrew-env/action.yml
+++ b/.github/actions/homebrew-env/action.yml
@@ -9,6 +9,12 @@ runs:
   using: 'composite'
 
   steps:
+    - name: git context
+      shell: bash
+      run: |
+        git config --global user.name "github-actions[bot]"
+        git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
     - name: Set up Homebrew
       id: set-up-homebrew
       uses: Homebrew/actions/setup-homebrew@master
@@ -17,13 +23,16 @@ runs:
         cask: true
         test-bot: false
 
-    - name: Add parallel cli
+    - name: Necessary clis
       shell: bash
       run: |
         brew install parallel
         # makesure brew livecheck works
         brew livecheck parallel
 
+        brew install coreutils
+        brew link --overwrite coreutils
+
     - name: Add Tap
       env:
         HOMEBREW_GITHUB_API_TOKEN: ${{ inputs.HOMEBREW_GITHUB_API_TOKEN }}
@@ -32,3 +41,6 @@ runs:
         brew tap brewforge/chinese
         brew update
         brew install ripgrep sd
+        brew install-bundler-gems --groups "audit,style"
+
+        brew update-reset $(brew --repository brewforge/chinese)
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 8db98d27..096e1f32 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -2,7 +2,7 @@ name: CI
 
 on:
   pull_request:
-    branches: [main, bump-*]
+    branches: [main]
   push:
     branches: [fix-*]
   schedule:
@@ -13,6 +13,8 @@ on:
   # allow run manually
   workflow_dispatch: {}
 
+permissions: write-all
+
 jobs:
   casks:
     name: Bump Casks in parallel