diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 898007b..2ce4ea5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -40,6 +40,9 @@ permissions:
   # scope): the decide step's label read (commits/<sha>/pulls) and the bump
   # fallback's `gh pr create --label`.
   pull-requests: write
+  # ...and the --label on that fallback PR rides the ISSUES API (labels.yml
+  # grants the same pair for the same reason).
+  issues: write
 
 jobs:
   release: