diff --git a/.github/workflows/workflow.yml b/.github/workflows/workflow.yml
index 98169593c..bda4fd6c3 100644
--- a/.github/workflows/workflow.yml
+++ b/.github/workflows/workflow.yml
@@ -1,5 +1,9 @@
 name: Java-SDK GitHub Actions
 on:
+  push:
+    branches:
+      - master
+      - 'release-*'
   pull_request:
   release:
     types: [ published, created, edited ]
@@ -10,12 +14,16 @@ env:
 jobs:
   build:
     name: build
+    # Heavy integration build runs on PRs and releases only; pushes to the main
+    # branches run just the lightweight 'coverage' job below (to upload a Codecov
+    # BASE report so PRs can show a coverage delta).
+    if: github.event_name != 'push'
     runs-on: ${{ matrix.os }}
     continue-on-error: true
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-22.04, windows-2025, macos-latest ]
+        os: [ ubuntu-latest, windows-2025, macos-latest ]
     steps:
       - uses: actions/checkout@v3
         with:
@@ -41,7 +49,7 @@ jobs:
       - name: install macOS dependencies
         if: runner.os == 'macOS'
         run: |
-          brew install openssl@1.1 ccache
+          brew install openssl@3 ccache
       - name: Set up JDK 1.8.0.382
         uses: actions/setup-java@v3
         with:
@@ -56,7 +64,7 @@ jobs:
 
   coverage:
     name: coverage
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
     continue-on-error: true
     steps:
       - uses: actions/checkout@v3