diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 9dce710..541a1e7 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -3,7 +3,12 @@ on:
         branches:
             - master
 
-name: release-please
+permissions:
+    contents: write
+    pull-requests: write
+    id-token: write
+
+name: release
 jobs:
     release-please:
         runs-on: ubuntu-latest
@@ -15,11 +20,11 @@ jobs:
                   package-name: imapflow
                   pull-request-title-pattern: 'chore${scope}: release ${version} [skip-ci]'
             # The logic below handles the npm publication:
-            - uses: actions/checkout@v2
+            - uses: actions/checkout@v3
               # these if statements ensure that a publication only occurs when
               # a new release is created:
               if: ${{ steps.release.outputs.release_created }}
-            - uses: actions/setup-node@v1
+            - uses: actions/setup-node@v3
               with:
                   node-version: 18
                   registry-url: 'https://registry.npmjs.org'