diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 7b46557..f10da78 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -6,12 +6,8 @@ on:
 name: linter
 
 permissions:
-  checks: write
   contents: read
-  statuses: write
 
 jobs:
   linter:
     uses: yii2-framework/actions/.github/workflows/super-linter.yml@v1
-    secrets:
-      AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 21de82f..66b808b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - refactor: Migrate the `default` debug views to `ui-awesome/html` builder components for consistent, escape-safe rendering.
 - fix: Update `yiisoft/yii2` and `yiisoft/yii2-symfonymailer` version constraints for compatibility.
 - docs: Update package badges and add social media links in `README.md`.
+- fix(ci): Remove unnecessary permissions and secrets from `linter.yml` workflow.
 
 ## 0.1.1 May 18, 2026
 
diff --git a/tests/timeline/SvgTest.php b/tests/timeline/SvgTest.php
index 9e64963..e7754e9 100644
--- a/tests/timeline/SvgTest.php
+++ b/tests/timeline/SvgTest.php
@@ -181,7 +181,7 @@ public function testConstructorSkipsSourcePanelsWithoutMessages(): void
 
         self::assertInstanceOf(LogPanel::class, $logPanel, 'Log panel must be wired.');
 
-        $logPanel->data = ['no-messages-key' => 'value'];
+        $logPanel->data = [];
 
         $svg = new Svg($panel);
 
diff --git a/tests/timeline/TimelinePanelTest.php b/tests/timeline/TimelinePanelTest.php
index dadcada..007763a 100644
--- a/tests/timeline/TimelinePanelTest.php
+++ b/tests/timeline/TimelinePanelTest.php
@@ -602,7 +602,7 @@ private function makeTimelinePanel(): TimelinePanel
      * Sets the {@see ProfilingPanel::$data} payload backing the profiling lookups (`time` for duration override,
      * `messages` for the span rows).
      *
-     * @param array<string, mixed> $data Profiling payload to inject.
+     * @param array{memory?: mixed, time?: mixed, messages?: mixed} $data Profiling payload to inject.
      */
     private function primeProfilingPanel(TimelinePanel $panel, array $data): void
     {