diff --git a/.github/workflows/auto_approve.yml b/.github/workflows/auto_approve.yml
index 0dde020b..09917738 100644
--- a/.github/workflows/auto_approve.yml
+++ b/.github/workflows/auto_approve.yml
@@ -9,3 +9,5 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           review-message: Auto approved automated PR
+    permissions:
+      pull-requests: write
diff --git a/.github/workflows/update_readme_api.yml b/.github/workflows/update_readme_api.yml
index cd4d36cd..a07b33e5 100644
--- a/.github/workflows/update_readme_api.yml
+++ b/.github/workflows/update_readme_api.yml
@@ -27,3 +27,6 @@ jobs:
           title: Sync API into README
           branch: readme-api
           commit-message: "docs(README): sync API"
+    permissions:
+      contents: write
+      pull-requests: write
diff --git a/package.json b/package.json
index 8900a825..004461e5 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
     "c8": "^10.1.3",
     "documentation": "^14.0.3",
     "execa": "^9.6.0",
-    "semantic-release": "^24.2.7"
+    "semantic-release": "^24.2.8"
   },
   "engines": {
     "node": ">=22.19.0"