diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d2f16e6..1568125 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,8 +5,8 @@ on:
       - 'v*' # Triggers on any tag starting with v (e.g. v1.0.0, v1.0.0-beta.1)
 
 permissions:
-  id-token: write # Required for OIDC
-  contents: read
+  id-token: write # Required for OIDC (NPM Trusted Publishing)
+  contents: write # Required for pushing docs and creating github releases
 
 jobs:
   # ------------------------------------------------------------------
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4b3bb22..4ac3d3e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+### Fixed
+
+- github action permissions to allow docs and github release jobs
+
 ## [4.0.0] - 2026-02-02
 
 ### Changed