diff --git a/.github/workflows/pr-labeler.yml b/.github/workflows/pr-labeler.yml
index 71267c6f..9cb529d3 100644
--- a/.github/workflows/pr-labeler.yml
+++ b/.github/workflows/pr-labeler.yml
@@ -6,7 +6,10 @@ on:
 jobs:
   pr-labeler:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read # for TimonVS/pr-labeler-action to read config
+      pull-requests: write # for TimonVS/pr-labeler-action to add labels in PR
     steps:
-      - uses: TimonVS/pr-labeler-action@v3
+      - uses: TimonVS/pr-labeler-action@v4
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}