diff --git a/.github/workflows/npm-update.yml b/.github/workflows/npm-update.yml
index ad674011c..8d5853a90 100644
--- a/.github/workflows/npm-update.yml
+++ b/.github/workflows/npm-update.yml
@@ -5,7 +5,9 @@ on:
   schedule:
     - cron: "0 0 * * *"  # Run daily at midnight UTC
 
-permissions: {}
+permissions:
+  contents: write
+  pull-requests: write
 
 jobs:
   npm-update:
@@ -29,7 +31,7 @@ jobs:
           node-version: 20
 
       - name: Run npm update
-        run: npm update
+        run: npm update --package-lock-only
 
       - name: Check if there are changes
         id: check_changes