diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 7434541..e9c4b20 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -5,6 +5,8 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 15
+    labels:
+      - "changelog/ignore"
     groups:
       github-actions:
         patterns:
@@ -15,6 +17,8 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 15
+    labels:
+      - "changelog/dependencies"
     groups:
       k8s:
         patterns:
@@ -25,6 +29,8 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 15
+    labels:
+      - "changelog/ignore"
     groups:
       gomod-e2e:
         patterns:
diff --git a/.github/release.yaml b/.github/release.yaml
new file mode 100644
index 0000000..10de894
--- /dev/null
+++ b/.github/release.yaml
@@ -0,0 +1,25 @@
+changelog:
+  exclude-labels:
+    - changelog/ignore
+  categories:
+    - title: Added
+      labels:
+        - changelog/added
+    - title: Changed
+      labels:
+        - changelog/changed
+    - title: Fixed
+      labels:
+        - changelog/fixed
+    - title: Deprecated
+      labels:
+        - changelog/deprecated
+    - title: Removed
+      labels:
+        - changelog/removed
+    - title: Security
+      labels:
+        - changelog/security
+    - title: Dependencies
+      labels:
+        - changelog/dependencies
diff --git a/.github/workflows/changelog-labels.yaml b/.github/workflows/changelog-labels.yaml
new file mode 100644
index 0000000..fe88fe6
--- /dev/null
+++ b/.github/workflows/changelog-labels.yaml
@@ -0,0 +1,20 @@
+name: changelog
+on:
+  pull_request:
+    types: [opened, labeled, unlabeled, synchronize]
+permissions:
+  pull-requests: read
+defaults:
+  run:
+    shell: bash
+jobs:
+  labels:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check changelog label
+        uses: mheap/github-action-required-labels@0ac283b4e65c1fb28ce6079dea5546ceca98ccbe #v5.5.2
+        with:
+          mode: exactly
+          count: 1
+          use_regex: true
+          labels: "changelog/.*"