diff --git a/.github/workflows/update-deps.yml b/.github/workflows/update-deps.yml
index 0d2b04f8ff..3d0fbbdf00 100644
--- a/.github/workflows/update-deps.yml
+++ b/.github/workflows/update-deps.yml
@@ -4,9 +4,14 @@ on:
   # Run every day.
   schedule:
     - cron: "0 3 * * *"
-  # Allow a manual trigger to be able to run the update when there are new dependencies or after a PR merge to resolve CHANGELOG conflicts.
+  # Allow a manual trigger to be able to run the update when there are new dependencies.
   workflow_dispatch:
 
+permissions:
+  contents: write      # To modify files and create commits
+  pull-requests: write # To create and update pull requests
+  actions: write       # To cancel previous workflow runs
+
 jobs:
   deps:
     name: ${{ matrix.name }}