diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index 52adf3c..5ae4a98 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -38,11 +38,12 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          token: ${{ secrets.RELEASE_PLZ_TOKEN }}
       - uses: dtolnay/rust-toolchain@stable
       - name: Run release-plz
         uses: release-plz/action@v0.5
         with:
           command: release
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.RELEASE_PLZ_TOKEN }}
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
diff --git a/release-plz.toml b/release-plz.toml
index 7b07dbf..823b9d7 100644
--- a/release-plz.toml
+++ b/release-plz.toml
@@ -3,6 +3,9 @@ changelog_update = true
 git_release_enable = false
 git_tag_enable = false
 semver_check = true
+pr_branch_prefix = "release-plz-"
+pr_labels = ["release"]
+publish_timeout = "10m"
 
 # The CLI crate is the user-facing release: it gets the GitHub release + tag.
 [[package]]
@@ -11,3 +14,6 @@ git_release_enable = true
 git_tag_enable = true
 git_tag_name = "v{{ version }}"
 git_release_name = "v{{ version }}"
+
+[changelog]
+protect_breaking_commits = true