diff --git a/.github/workflows/auto-release.yml b/.github/workflows/auto-release.yml
index ea06b68..14be64f 100644
--- a/.github/workflows/auto-release.yml
+++ b/.github/workflows/auto-release.yml
@@ -13,14 +13,18 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
       # Drafts your next Release notes as Pull Requests are merged into "main"
-      - uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 # v6
+      - uses: release-drafter/release-drafter@3a7fb5c85b80b1dda66e1ccb94009adbbd32fce3 # v7
         with:
           publish: false
           prerelease: true
           config-name: auto-release.yml
+          commitish: main
           # allows autolabeler to run without unmerged PRs from being added to draft
           disable-releaser: ${{ github.ref_name != 'main' }}
         env: