diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 9cc849c7bac6..7ceeee75290a 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -18,17 +18,23 @@ permissions:
 jobs:
   title:
     runs-on: ubuntu-latest
-    if: '!github.event.pull_request.draft'
     steps:
       - name: Check PR title if not sematic
         uses: actions/github-script@v6
+        id: check
         with:
           script: |
+            if (!context.payload.pull_request) {
+              core.info('PR payload is null');
+              core.setOutput('title', 'ignore');
+              return;
+            }
             const title = context.payload.pull_request.title;
             const regex = /^(rfc|feat|fix|refactor|ci|docs|chore)(\([a-z0-9-]+\))?:/;
             const m = title.match(regex);
             if (!m) {
-              core.setFailed('PR title is not semantic');
+              core.error('PR title is not semantic');
+              core.setOutput('title', 'not-semantic');
               return;
             }
             const prType = m[1];
@@ -64,15 +70,16 @@ jobs:
               issue_number: context.issue.number,
               labels: [label],
             });
+            core.setOutput('title', 'semantic');
       - name: Delete Comment
-        if: success()
+        if: steps.check.outputs.title == 'semantic'
         uses: everpcpc/comment-on-pr-action@v1
         with:
           token: ${{ github.token }}
           identifier: 'pr-assistant-title'
           delete: true
       - name: Comment on PR
-        if: failure()
+        if: steps.check.outputs.title == 'not-semantic'
         uses: everpcpc/comment-on-pr-action@v1
         with:
           token: ${{ github.token }}
@@ -103,26 +110,34 @@ jobs:
 
   cla:
     runs-on: ubuntu-latest
-    if: '!github.event.pull_request.draft'
     steps:
       - name: Check CLA if not signed
         uses: actions/github-script@v6
+        id: check
         with:
           script: |
+            if (!context.payload.pull_request) {
+              core.info('PR payload is null');
+              core.setOutput('cla', 'ignore');
+              return;
+            }
             const body = context.payload.pull_request.body;
             const regex = /I hereby agree to the terms of the CLA available at: https:\/\/databend\.rs\/dev\/policies\/cla\//;
             if (!regex.test(body)) {
-              core.setFailed('CLA is not signed');
+              core.error('CLA is not signed');
+              core.setOutput('cla', 'not-signed');
+            } else {
+              core.setOutput('cla', 'signed');
             }
       - name: Delete Comment
-        if: success()
+        if: steps.check.outputs.cla == 'signed'
         uses: everpcpc/comment-on-pr-action@v1
         with:
           token: ${{ github.token }}
           identifier: 'pr-assistant-cla'
           delete: true
       - name: Comment on PR
-        if: failure()
+        if: steps.check.outputs.cla == 'not-signed'
         uses: everpcpc/comment-on-pr-action@v1
         with:
           token: ${{ github.token }}
diff --git a/.github/workflows/reuse.linux.yml b/.github/workflows/reuse.linux.yml
index 0a46aed26700..808fa3b0cc82 100644
--- a/.github/workflows/reuse.linux.yml
+++ b/.github/workflows/reuse.linux.yml
@@ -304,7 +304,8 @@ jobs:
         dirs:
           - "ydb"
           - "tpcds"
-          - "tpch"
+          # FIXME: flaky
+          # - "tpch"
           - "cluster"
     steps:
       - uses: actions/checkout@v4
diff --git a/scripts/setup/rust-tools.txt b/scripts/setup/rust-tools.txt
index 5beae5e2934c..8ee72068403b 100644
--- a/scripts/setup/rust-tools.txt
+++ b/scripts/setup/rust-tools.txt
@@ -1,5 +1,5 @@
-cargo-audit@0.17.6
-cargo-machete@0.5.0
-cargo-nextest@0.9.58
+cargo-audit@0.18.2
+cargo-machete@0.6.0
+cargo-nextest@0.9.59
 taplo-cli@0.8.1
-typos-cli@1.16.3
+typos-cli@1.16.18