diff --git a/.craft.yml b/.craft.yml
index 754d9c8cc..309ff94d0 100644
--- a/.craft.yml
+++ b/.craft.yml
@@ -2,48 +2,51 @@ minVersion: "2.15.0"
 changelog:
   policy: auto
 targets:
-  - name: github
-  - name: registry
-    apps:
-      app:symbolicator:
-        urlTemplate: https://downloads.sentry-cdn.com/symbolicator/{{version}}/{{file}}
-        includeNames: /^symbolicator-.*$/i
-  - name: gcs
-    bucket: sentry-sdk-assets
-    includeNames: /^symbolicator-.*$/
-    paths:
-      - path: /symbolicator/{{version}}/
-        metadata:
-          cacheControl: public, max-age=2592000
-      - path: /symbolicator/latest/
-        metadata:
-          cacheControl: public, max-age=600
-  - id: release
-    name: docker
-    source: ghcr.io/getsentry/symbolicator
-    target: ghcr.io/getsentry/symbolicator
-  - id: latest
-    name: docker
-    source: ghcr.io/getsentry/symbolicator
-    target: ghcr.io/getsentry/symbolicator
-    targetFormat: '{{{target}}}:latest'
+- name: github
+- name: registry
+  apps:
+    app:symbolicator:
+      urlTemplate: 
+        https://downloads.sentry-cdn.com/symbolicator/{{version}}/{{file}}
+      includeNames: /^symbolicator-.*$/i
+- name: gcs
+  bucket: sentry-sdk-assets
+  includeNames: /^symbolicator-.*$/
+  paths:
+  - path: /symbolicator/{{version}}/
+    metadata:
+      cacheControl: public, max-age=2592000
+  - path: /symbolicator/latest/
+    metadata:
+      cacheControl: public, max-age=600
+- id: release
+  name: docker
+  source: ghcr.io/getsentry/symbolicator
+  target: ghcr.io/getsentry/symbolicator
+- id: latest
+  name: docker
+  source: ghcr.io/getsentry/symbolicator
+  target: ghcr.io/getsentry/symbolicator
+  targetFormat: '{{{target}}}:latest'
 requireNames:
-  - /^symbolicator-Darwin-universal$/
-  - /^symbolicator-Linux-x86_64$/
-  - /^symbolicator-Linux-aarch64$/
-  - /^symbolicator-Linux-x86_64-debug.zip$/
-  - /^symbolicator-Linux-aarch64-debug.zip$/
-  - /^symbolicator-aarch64-apple-darwin-debug.zip$/
-  - /^symbolicator-x86_64-apple-darwin-debug.zip$/
-  - /^symbolicli-Darwin-universal$/
-  - /^symbolicli-Linux-x86_64$/
-  - /^symbolicli-Linux-aarch64$/
-  - /^symbolicli-Windows-x86_64\.exe$/
-  - /^symsorter-Darwin-universal$/
-  - /^symsorter-Linux-x86_64$/
-  - /^symsorter-Linux-aarch64$/
-  - /^symsorter-Windows-x86_64\.exe$/
-  - /^wasm-split-Darwin-universal$/
-  - /^wasm-split-Linux-x86_64$/
-  - /^wasm-split-Linux-aarch64$/
-  - /^wasm-split-Windows-x86_64\.exe$/
+- /^symbolicator-Darwin-universal$/
+- /^symbolicator-Linux-x86_64$/
+- /^symbolicator-Linux-aarch64$/
+- /^symbolicator-Linux-x86_64-debug.zip$/
+- /^symbolicator-Linux-aarch64-debug.zip$/
+- /^symbolicator-aarch64-apple-darwin-debug.zip$/
+- /^symbolicator-x86_64-apple-darwin-debug.zip$/
+- /^symbolicli-Darwin-universal$/
+- /^symbolicli-Linux-x86_64$/
+- /^symbolicli-Linux-aarch64$/
+- /^symbolicli-Windows-x86_64\.exe$/
+- /^symsorter-Darwin-universal$/
+- /^symsorter-Linux-x86_64$/
+- /^symsorter-Linux-aarch64$/
+- /^symsorter-Windows-x86_64\.exe$/
+- /^wasm-split-Darwin-universal$/
+- /^wasm-split-Linux-x86_64$/
+- /^wasm-split-Linux-aarch64$/
+- /^wasm-split-Windows-x86_64\.exe$/
+versioning:
+  policy: calver
diff --git a/.github/workflows/changelog-preview.yml b/.github/workflows/changelog-preview.yml
new file mode 100644
index 000000000..30c6083c6
--- /dev/null
+++ b/.github/workflows/changelog-preview.yml
@@ -0,0 +1,18 @@
+name: Changelog Preview
+on:
+  pull_request:
+    types:
+    - opened
+    - synchronize
+    - reopened
+    - edited
+    - labeled
+    - unlabeled
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  changelog-preview:
+    uses: getsentry/craft/.github/workflows/changelog-preview.yml@v2
+    secrets: inherit
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1497e24b5..8f7b70bc7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -3,7 +3,7 @@ on:
   workflow_dispatch:
     inputs:
       version:
-        description: Version to release (optional)
+        description: Version to release (or "auto")
         required: false
       force:
         description: Force a release even when there are release-blockers (optional)
@@ -12,6 +12,10 @@ on:
     # We want the release to be at 9-10am Pacific Time
     # We also want it to be 1 hour before the on-prem release
     - cron: '0 17 15 * *' # 5pm UTC on the 15th of every month
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -31,7 +35,7 @@ jobs:
           fetch-depth: 0
 
       - name: Prepare release
-        uses: getsentry/action-prepare-release@v1
+        uses: getsentry/craft@c6e2f04939b6ee67030588afbb5af76b127d8203 # v2
         env:
           GITHUB_TOKEN:  ${{ steps.token.outputs.token }}
         with: