diff --git a/.github/workflows/cascade.yml b/.github/workflows/cascade.yml
index f91da26..7f79954 100644
--- a/.github/workflows/cascade.yml
+++ b/.github/workflows/cascade.yml
@@ -27,6 +27,7 @@ on:
 
 permissions:
   contents: write
+  pull-requests: write   # tag-bump lands bumps via PR + auto-merge
 
 jobs:
   bump: