diff --git a/.github/workflows/updatecli.yaml b/.github/workflows/updatecli.yaml
index 78cb816f..520cfa18 100644
--- a/.github/workflows/updatecli.yaml
+++ b/.github/workflows/updatecli.yaml
@@ -16,7 +16,7 @@ jobs:
       - name: "Setup updatecli"
         uses: "updatecli/updatecli-action@5ca36367fadc6ad94d590984fd9c696e783ec635" # v2.96.0
         with:
-          version: "v0.113.0"
+          version: "v0.114.0"
 
       - name: "Run updatecli"
         run: updatecli compose apply --clean-git-branches=true --experimental
diff --git a/.github/workflows/updatecli_test.yaml b/.github/workflows/updatecli_test.yaml
index 7f1aed9d..861cc24f 100644
--- a/.github/workflows/updatecli_test.yaml
+++ b/.github/workflows/updatecli_test.yaml
@@ -16,7 +16,7 @@ jobs:
       - name: "Setup updatecli"
         uses: "updatecli/updatecli-action@5ca36367fadc6ad94d590984fd9c696e783ec635" # v2.96.0
         with:
-          version: "v0.113.0"
+          version: "v0.114.0"
 
       - name: "Test updatecli in dry-run mode"
         run: "updatecli compose diff"
diff --git a/.github/workflows/updatecli_update.yaml b/.github/workflows/updatecli_update.yaml
index 92e6bbfd..7b1ae1e5 100644
--- a/.github/workflows/updatecli_update.yaml
+++ b/.github/workflows/updatecli_update.yaml
@@ -18,7 +18,17 @@ jobs:
       - name: "Setup updatecli"
         uses: "updatecli/updatecli-action@5ca36367fadc6ad94d590984fd9c696e783ec635" # v2.96.0
         with:
-          version: "v0.113.0"
+          version: "v0.114.0"
+
+      - name: "Run updatecli only on monitored pipelines"
+        run: updatecli compose apply --clean-git-branches=true --labels="monitoring:enabled" --experimental
+        env:
+          UPDATECLI_GITHUB_APP_CLIENT_ID: ${{ secrets.UPDATECLIBOT_APP_ID }}
+          UPDATECLI_GITHUB_APP_PRIVATE_KEY: ${{ secrets.UPDATECLIBOT_APP_PRIVKEY }}
+          UPDATECLI_GITHUB_APP_INSTALLATION_ID: ${{ secrets.UPDATECLIBOT_APP_INSTALLATION_ID }}
+          UPDATECLI_UDASH_API_URL: ${{ secrets.UPDATECLI_UDASH_API_URL }}
+          UPDATECLI_UDASH_ACCESS_TOKEN: ${{ secrets.UPDATECLI_UDASH_ACCESS_TOKEN }}
+          UPDATECLI_UDASH_URL: ${{ secrets.UPDATECLI_UDASH_URL }}
 
       - name: "Run updatecli only on existing pipelines"
         run: updatecli compose apply --clean-git-branches=true --existing-only=true --experimental
diff --git a/updatecli-compose.yaml b/updatecli-compose.yaml
index 56fd216e..c44b0e83 100644
--- a/updatecli-compose.yaml
+++ b/updatecli-compose.yaml
@@ -32,3 +32,9 @@ policies:
     values:
       - updatecli/values.d/scm.yaml
       - updatecli/values.d/githubaction.yaml
+
+  - name: Update Updatecli version in GitHub action
+    policy: ghcr.io/updatecli/policies/updatecli/githubaction:0.7.0
+    values:
+      - updatecli/values.d/scm.yaml
+      - updatecli/values.d/githubaction.yaml
diff --git a/updatecli/updatecli.d/updatecli.yaml b/updatecli/updatecli.d/updatecli.yaml
index 4ef9f281..4f112772 100644
--- a/updatecli/updatecli.d/updatecli.yaml
+++ b/updatecli/updatecli.d/updatecli.yaml
@@ -1,5 +1,10 @@
 name: "deps: bump updatecli version"
 pipelineid: "updatecli_action_version"
+
+labels:
+  event: release
+  monitoring: enabled
+
 actions:
   default:
     kind: "github/pullrequest"