diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f0de4cd9c769d..b1172dd8113a9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -100,6 +100,9 @@ jobs:
     with:
       plan: ${{ needs.plan.outputs.val }}
     secrets: inherit
+    permissions:
+      packages: write
+      contents: read
 
   # Build and package all the platform-agnostic(ish) things
   build-global-artifacts:
diff --git a/Cargo.toml b/Cargo.toml
index c768abf013fc8..aad3db53bc312 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -273,6 +273,6 @@ publish-jobs = ["./publish-pypi"]
 # Announcement jobs to run in CI
 post-announce-jobs = ["./notify-dependents"]
 # Skip checking whether the specified configuration files are up to date
-#allow-dirty = ["ci"]
+allow-dirty = ["ci"]
 # Whether to install an updater program
 install-updater = false