diff --git a/.github/workflows/cicd-1-pull-request.yaml b/.github/workflows/cicd-1-pull-request.yaml
index df2e2d4..3468baa 100644
--- a/.github/workflows/cicd-1-pull-request.yaml
+++ b/.github/workflows/cicd-1-pull-request.yaml
@@ -3,14 +3,14 @@ name: "CI/CD pull request"
 on:
   push:
     branches:
-      - "**"
+      - "main"
   pull_request:
-    types: [opened, reopened]
+    types: [opened, reopened, synchronize]
+    branches:
+      - main
 
 jobs:
   check-version:
-    # Only enforce version bump on main branch pushes or version tag pushes
-    if: startsWith(github.ref, 'refs/heads/main') || startsWith(github.ref, 'refs/tags/v')
     name: "Check version"
     runs-on: ubuntu-latest
     steps:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9db9eef..978b9be 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Changelog
 
+## [v1.4.6] (2026-07-22)
+
+### Features
+
+- Add optional `restore_acl` flag to the restore-to-s3 Lambda event contract, defaulting to `false`
+
+### Improvements
+
+- Update name prefix validation to allow hyphens (`-`) in `name_prefix`
+
 
 ## [v1.4.5] (2026-05-26)
 
diff --git a/modules/aws-backup-source/version b/modules/aws-backup-source/version
index 959bb9d..2aca8c0 100644
--- a/modules/aws-backup-source/version
+++ b/modules/aws-backup-source/version
@@ -1 +1 @@
-v1.4.5
+v1.4.6