diff --git a/.github/workflows/cascade.yml b/.github/workflows/cascade.yml
index 2a6182c..306ed41 100644
--- a/.github/workflows/cascade.yml
+++ b/.github/workflows/cascade.yml
@@ -25,6 +25,7 @@ on:
 
 permissions:
   contents: write
+  pull-requests: write   # tag-bump lands bumps via PR + auto-merge
 
 jobs:
   bump: