diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index af0c73d..23ec96d 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -9,8 +9,16 @@ cache:
     - .cache/pip
     - .venv/
 
+workflow:
+  rules:
+    - if: $CI_COMMIT_AUTHOR == "Gitlab CI <ci@gitlab.com>"
+      when: never
+    - when: always
+
+
 stages:
   - prepare
+  - deps
   - build
   - deploy
   - release
@@ -33,6 +41,38 @@ prepare:
     reports:
       dotenv: build.env
 
+update_windows_deps:
+  stage: deps
+  tags:
+    - shared-windows
+    - windows
+    - windows-1809
+  rules:
+    - if: $CI_COMMIT_TAG
+      when: never
+    - if: $CI_COMMIT_BRANCH == "main"
+      when: always
+    #- changes:
+    #    - Pipfile
+    #    - Pipfile.lock
+    #  when: always
+  before_script:
+    - Import-Module "${ChocolateyInstall}\helpers\chocolateyProfile.psm1"
+    - choco install python --version=$PYTHON_VERSION -y --no-progress
+    - choco install openssh -y --no-progress
+    - refreshenv
+    - python --version
+    - pip install pipenv
+    - ssh-agent -s
+    - cat "${WINDOWS_SSH_PRIVATE_KEY}" | ssh-add -
+    - git config --global user.name "Gitlab CI"
+    - git config --global user.email "ci@gitlab.com"
+  script:
+    - pipenv lock --dev --keep-outdated
+    - git commit -m "Updated windows deps from CI" Pipfile.lock
+    - git push
+
+
 package_linux:
   stage: build
   before_script: