diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d2f16e6..1568125 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,8 +5,8 @@ on:
       - 'v*' # Triggers on any tag starting with v (e.g. v1.0.0, v1.0.0-beta.1)
 
 permissions:
-  id-token: write # Required for OIDC
-  contents: read
+  id-token: write # Required for OIDC (NPM Trusted Publishing)
+  contents: write # Required for pushing docs and creating github releases
 
 jobs:
   # ------------------------------------------------------------------
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index c46f642..1fd759b 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -15,7 +15,7 @@ jobs:
 
     strategy:
       matrix:
-        node: ['20']
+        node: ['24']
         os: [macos-latest, ubuntu-latest, windows-latest]
 
     steps:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4c5cff7..1b6eb4c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+
+- github action permissions to allow docs and github release jobs
+
 ## [4.0.0] - 2026-02-02
 
 ### Removed