diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 77549db..57d02d1 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -3,8 +3,10 @@ name: lint
 on:
   pull_request:
     branches: [main]
-  push:
-    branches: [main]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   ruff-mypy:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 3bdea9a..b38541b 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -3,15 +3,19 @@ name: test
 on:
   pull_request:
     branches: [main]
-  push:
-    branches: [main]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   unit-integration-golden:
     runs-on: [self-hosted, linux, x64]
     strategy:
       matrix:
-        python-version: ["3.11", "3.12"]
+        # 3.12 on PR; full matrix on tag releases. Was [3.11, 3.12] on every
+        # PR; doubled minutes without catching anything PRs were breaking.
+        python-version: ${{ github.event_name == 'pull_request' && fromJson('["3.12"]') || fromJson('["3.11", "3.12"]') }}
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-python@v6