diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 0a300a8..f066c26 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -7,22 +7,24 @@ on:
     - cron: "5 0 * * *"
   workflow_dispatch:
 
-permissions:
-  contents: write
+permissions: read-all
 
 jobs:
   build:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: write
+
     steps:
     # Check out repository under $GITHUB_WORKSPACE, so the job can access it
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-    # Run using Python 3.8 for consistency and aiohttp
-    - name: Set up Python 3.8
+    # Run using Python for consistency and aiohttp
+    - name: Set up Python
       uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5
       with:
-        python-version: '3.8'
+        python-version: '3.13'
         architecture: 'x64'
 
     # Cache dependencies. From: