diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d2f16e6e..1568125f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,8 +5,8 @@ on:
       - 'v*' # Triggers on any tag starting with v (e.g. v1.0.0, v1.0.0-beta.1)
 
 permissions:
-  id-token: write # Required for OIDC
-  contents: read
+  id-token: write # Required for OIDC (NPM Trusted Publishing)
+  contents: write # Required for pushing docs and creating github releases
 
 jobs:
   # ------------------------------------------------------------------
diff --git a/CHANGELOG.md b/CHANGELOG.md
index cd964b11..6805215a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+
+- github action permissions to allow docs and github release jobs
+
 ## [9.0.1] - 2026-02-04
 
 ### Fixed