diff --git a/.github/workflows/dotnet.yml b/.github/workflows/dotnet.yml
index f00ab86..d3905bb 100644
--- a/.github/workflows/dotnet.yml
+++ b/.github/workflows/dotnet.yml
@@ -36,6 +36,14 @@ jobs:
         with:
           dotnet-version: ${{ matrix.dotnet-version }}
 
+      - name: Cache NuGet packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.nuget/packages
+          key: ${{ runner.os }}-nuget-${{ hashFiles('**/*.csproj') }}
+          restore-keys: |
+            ${{ runner.os }}-nuget-
+
       - name: Restore
         run: dotnet restore
 
diff --git a/.github/workflows/repo-assist.lock.yml b/.github/workflows/repo-assist.lock.yml
index 568d345..92fda23 100644
--- a/.github/workflows/repo-assist.lock.yml
+++ b/.github/workflows/repo-assist.lock.yml
@@ -1957,6 +1957,7 @@ jobs:
       discussions: write
       issues: write
       pull-requests: write
+      workflows: write
     timeout-minutes: 15
     env:
       GH_AW_CALLER_WORKFLOW_ID: "${{ github.repository }}/repo-assist"
diff --git a/.github/workflows/repo-assist.md b/.github/workflows/repo-assist.md
index 56ef645..2f3fd86 100644
--- a/.github/workflows/repo-assist.md
+++ b/.github/workflows/repo-assist.md
@@ -81,13 +81,13 @@ safe-outputs:
     draft: true
     title-prefix: "[repo-assist] "
     labels: [automation, repo-assist]
-    protected-files: fallback-to-issue
+    protected-files: none
     max: 4
   push-to-pull-request-branch:
     target: "*"
     required-title-prefix: "[repo-assist] "
     max: 4
-    protected-files: fallback-to-issue
+    protected-files: none
   create-issue:
     title-prefix: "[repo-assist] "
     labels: [automation, repo-assist]