diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 38f826a..bd87fcd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -44,6 +44,9 @@ permissions:
   # zeroes every unspecified scope): the decide step's label read
   # (commits/<sha>/pulls) and the bump fallback's `gh pr create --label`.
   pull-requests: write
+  # ...and the --label on that fallback PR rides the ISSUES API (labels.yml
+  # grants the same pair for the same reason).
+  issues: write
 
 jobs:
   release: