diff --git a/.github/workflows/bump-version-release.yaml b/.github/workflows/bump-version-release.yaml
index 5bd7ba8ac..a891d118e 100644
--- a/.github/workflows/bump-version-release.yaml
+++ b/.github/workflows/bump-version-release.yaml
@@ -47,7 +47,6 @@ on:
 jobs:
   release:
     runs-on: ubuntu-22.04
-
     # Map the job outputs to step outputs
     outputs:
       release-version: ${{ steps.bump-version.outputs.release-version }}
diff --git a/.github/workflows/docker-build-and-publish.yaml b/.github/workflows/docker-build-and-publish.yaml
index 28375ec29..cb51c61c3 100644
--- a/.github/workflows/docker-build-and-publish.yaml
+++ b/.github/workflows/docker-build-and-publish.yaml
@@ -54,6 +54,7 @@ on:
         required: false
         default: "."
         type: string
+
     secrets:
       docker-user:
         description: "Username for the Docker registry login."
@@ -67,11 +68,14 @@ on:
         description: "GitHub token."
         required: false
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-docker
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   docker-build:
     name: Docker build
     runs-on: ubuntu-22.04
-
     steps:
       - name: Check out repository
         uses: bakdata/ci-templates/actions/checkout@1.32.0
diff --git a/.github/workflows/helm-gke-deploy.yaml b/.github/workflows/helm-gke-deploy.yaml
index efb15d304..5f1e226a7 100644
--- a/.github/workflows/helm-gke-deploy.yaml
+++ b/.github/workflows/helm-gke-deploy.yaml
@@ -56,6 +56,7 @@ on:
         default: "v3.8.1"
         required: false
         type: string
+
     secrets:
       gke-service-account:
         description: "GKE service account key for authentication"
@@ -70,11 +71,14 @@ on:
         description: "GKE cluster for authentication"
         required: true
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-helm-gke-deploy
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   deploy:
     name: Deploy
     runs-on: ubuntu-22.04
-
     steps:
       - name: Checkout repository
         uses: bakdata/ci-templates/actions/checkout@1.32.0
diff --git a/.github/workflows/helm-gke-destroy.yaml b/.github/workflows/helm-gke-destroy.yaml
index ea6c4686b..45b28105f 100644
--- a/.github/workflows/helm-gke-destroy.yaml
+++ b/.github/workflows/helm-gke-destroy.yaml
@@ -27,6 +27,7 @@ on:
         default: "v3.8.1"
         required: false
         type: string
+
     secrets:
       gke-service-account:
         description: "GKE service account key for authentication"
@@ -41,11 +42,14 @@ on:
         description: "GKE cluster for authentication"
         required: true
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-helm-gke-destroy
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   destroy:
     name: Destroy
     runs-on: ubuntu-22.04
-
     steps:
       - name: Checkout repository
         uses: bakdata/ci-templates/actions/checkout@1.32.0
diff --git a/.github/workflows/helm-multi-release.yaml b/.github/workflows/helm-multi-release.yaml
index d8980bb02..7a2020a04 100644
--- a/.github/workflows/helm-multi-release.yaml
+++ b/.github/workflows/helm-multi-release.yaml
@@ -44,10 +44,13 @@ on:
         description: "The GitHub token for committing the changes."
         required: true
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-helm-multi-release
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   helm-lint:
     runs-on: ubuntu-22.04
-
     steps:
       - name: Lint Helm chart
         uses: bakdata/ci-templates/actions/helm-lint@v1.10.0
@@ -134,7 +137,7 @@ jobs:
 
   publish-artifacts:
     runs-on: ubuntu-22.04
-    needs: [package-new-artifacts,update-version]
+    needs: [package-new-artifacts, update-version]
     env:
       artifact-dir: "${{ inputs.artifact-dir }}"
       charts-path: "${{ inputs.artifact-dir }}"
diff --git a/.github/workflows/helm-release.yaml b/.github/workflows/helm-release.yaml
index c7aa2a945..d2cc37fdc 100644
--- a/.github/workflows/helm-release.yaml
+++ b/.github/workflows/helm-release.yaml
@@ -62,10 +62,13 @@ on:
         description: "The old version in your `.bumpversion.cfg` file."
         value: ${{ jobs.helm-release.outputs.old-version }}
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-helm-release
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   helm-lint:
     runs-on: ubuntu-22.04
-
     steps:
       - name: Lint Helm chart
         uses: bakdata/ci-templates/actions/helm-lint@v1.0.0
diff --git a/.github/workflows/java-gradle-base.yaml b/.github/workflows/java-gradle-base.yaml
index 98eae76ad..ec399c913 100644
--- a/.github/workflows/java-gradle-base.yaml
+++ b/.github/workflows/java-gradle-base.yaml
@@ -34,6 +34,7 @@ on:
         required: false
         type: string
         default: "."
+
     secrets:
       signing-key-id:
         description: "Key id for signing the Sonatype publication."
@@ -51,11 +52,14 @@ on:
         description: "Token for Sonarcloud."
         required: true
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-java-gradle-base
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   build:
     name: Build
     runs-on: ubuntu-22.04
-
     steps:
       - name: Build
         uses: bakdata/ci-templates/actions/java-gradle-build@v1.16.0
diff --git a/.github/workflows/java-gradle-docker.yaml b/.github/workflows/java-gradle-docker.yaml
index 90e816142..282f9e3f0 100644
--- a/.github/workflows/java-gradle-docker.yaml
+++ b/.github/workflows/java-gradle-docker.yaml
@@ -33,6 +33,7 @@ on:
         required: false
         type: string
         default: "."
+
     secrets:
       sonar-token:
         description: "Token for Sonarcloud."
@@ -68,6 +69,10 @@ on:
         description: "GitHub token for requesting changes from API."
         required: true
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-java-gradle-docker
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   build-and-test:
     name: Build, Test and Assess code quality
diff --git a/.github/workflows/java-gradle-library.yaml b/.github/workflows/java-gradle-library.yaml
index 02daba5d1..0b70789cc 100644
--- a/.github/workflows/java-gradle-library.yaml
+++ b/.github/workflows/java-gradle-library.yaml
@@ -29,6 +29,7 @@ on:
         required: false
         type: string
         default: "."
+
     secrets:
       sonar-token:
         description: "Token for Sonarcloud."
@@ -58,6 +59,10 @@ on:
         description: "GitHub token for requesting changes from API."
         required: true
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-java-gradle-lib
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   build-and-test:
     name: Build, Test and Assess code quality
diff --git a/.github/workflows/java-gradle-plugin.yaml b/.github/workflows/java-gradle-plugin.yaml
index 50363340f..69b6945ba 100644
--- a/.github/workflows/java-gradle-plugin.yaml
+++ b/.github/workflows/java-gradle-plugin.yaml
@@ -29,6 +29,7 @@ on:
         required: false
         type: string
         default: "."
+
     secrets:
       sonar-token:
         description: "Token for Sonarcloud."
@@ -64,6 +65,10 @@ on:
         description: "GitHub token for requesting changes from API."
         required: true
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-java-gradle-plugin
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   build-and-test:
     name: Build, Test and Assess code quality
diff --git a/.github/workflows/java-gradle-release.yaml b/.github/workflows/java-gradle-release.yaml
index 374b3e2a8..247523c43 100644
--- a/.github/workflows/java-gradle-release.yaml
+++ b/.github/workflows/java-gradle-release.yaml
@@ -38,6 +38,7 @@ on:
         required: false
         type: string
         default: "."
+
     secrets:
       github-username:
         description: "GitHub username for committing the changes."
diff --git a/.github/workflows/kustomize-gke-deploy.yaml b/.github/workflows/kustomize-gke-deploy.yaml
index 8b4d4d242..0d46b56fa 100644
--- a/.github/workflows/kustomize-gke-deploy.yaml
+++ b/.github/workflows/kustomize-gke-deploy.yaml
@@ -28,6 +28,7 @@ on:
         default: "v3.8.1"
         required: false
         type: string
+
     secrets:
       gke-service-account:
         description: "GKE service account key for authentication"
@@ -42,6 +43,10 @@ on:
         description: "GKE cluster for authentication"
         required: true
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-kustomize-gke-deploy
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   deploy:
     name: Deploy
diff --git a/.github/workflows/kustomize-gke-destroy.yaml b/.github/workflows/kustomize-gke-destroy.yaml
index c284e50e3..f00981a71 100644
--- a/.github/workflows/kustomize-gke-destroy.yaml
+++ b/.github/workflows/kustomize-gke-destroy.yaml
@@ -23,6 +23,7 @@ on:
         default: "v3.8.1"
         required: false
         type: string
+
     secrets:
       gke-service-account:
         description: "GKE service account key for authentication"
@@ -37,6 +38,10 @@ on:
         description: "GKE cluster for authentication"
         required: true
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-kustomize-gke-destroy
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   destroy:
     name: Destroy
diff --git a/.github/workflows/python-poetry-publish-pypi.yaml b/.github/workflows/python-poetry-publish-pypi.yaml
index 1c23b92fd..e2c1dcb8f 100644
--- a/.github/workflows/python-poetry-publish-pypi.yaml
+++ b/.github/workflows/python-poetry-publish-pypi.yaml
@@ -23,11 +23,16 @@ on:
         required: false
         default: "./"
         type: string
+
     secrets:
       pypi-token:
         description: "PyPI token"
         required: true
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-python-poetry-publish-pypi
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   publish:
     name: Publish
diff --git a/.github/workflows/python-poetry-publish-snapshot.yaml b/.github/workflows/python-poetry-publish-snapshot.yaml
index 3e6746e61..054b025bd 100644
--- a/.github/workflows/python-poetry-publish-snapshot.yaml
+++ b/.github/workflows/python-poetry-publish-snapshot.yaml
@@ -18,6 +18,7 @@ on:
         required: false
         default: "./"
         type: string
+
     secrets:
       pypi-token:
         description: "TestPyPI token"
@@ -32,6 +33,10 @@ on:
         description: "The old version of the package."
         value: ${{ jobs.publish-snapshot.outputs.old-version }}
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-python-poetry-publish-snapshot
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   publish-snapshot:
     name: Publish snapshot
diff --git a/.github/workflows/python-poetry-release.yaml b/.github/workflows/python-poetry-release.yaml
index 7975e3d0a..c20a6eb01 100644
--- a/.github/workflows/python-poetry-release.yaml
+++ b/.github/workflows/python-poetry-release.yaml
@@ -37,6 +37,7 @@ on:
         required: false
         default: "./"
         type: string
+
     secrets:
       github-username:
         description: "The GitHub username for committing the changes."
diff --git a/.github/workflows/release-tag-versions.yaml b/.github/workflows/release-tag-versions.yaml
index a19ff3af4..3578ea300 100644
--- a/.github/workflows/release-tag-versions.yaml
+++ b/.github/workflows/release-tag-versions.yaml
@@ -20,6 +20,7 @@ on:
         required: false
         default: "SNAPSHOT"
         type: string
+
     secrets:
       github-email:
         description: "The GitHub email for committing the changes."
@@ -34,7 +35,6 @@ on:
 jobs:
   bump_and_release:
     runs-on: ubuntu-latest
-
     steps:
       - name: Check out default branch
         uses: bakdata/ci-templates/actions/checkout@1.32.0
diff --git a/.github/workflows/test-python-setup-poetry.yaml b/.github/workflows/test-python-setup-poetry.yaml
index 6ef1a6093..d7ee58044 100644
--- a/.github/workflows/test-python-setup-poetry.yaml
+++ b/.github/workflows/test-python-setup-poetry.yaml
@@ -11,6 +11,10 @@ on:
 env:
   POETRY_VERSION: "1.2.2"
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-test-python-setup-poetry
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
 jobs:
   tests:
     name: ${{ matrix.os }} / ${{ matrix.python-version }}