diff --git a/.github/release-drafter.yml b/.github/release-drafter.yml
index a4dce4c2b4..0d507d1104 100644
--- a/.github/release-drafter.yml
+++ b/.github/release-drafter.yml
@@ -1,3 +1,8 @@
+categories:
+  - title: 'Dependency updates'
+    collapse-after: 3
+    labels:
+      - 'dependencies'
 template: |
   ## What's Changed
 
diff --git a/.github/workflows/release-drafter.yaml b/.github/workflows/release-drafter.yaml
index 00954a2615..71a80c804f 100644
--- a/.github/workflows/release-drafter.yaml
+++ b/.github/workflows/release-drafter.yaml
@@ -5,8 +5,17 @@ on:
     branches:
       - dev
 
+permissions:
+  contents: read
+
 jobs:
   update_release_draft:
+    permissions:
+      # write permission for contents is required to create a github release
+      contents: write
+      # write permission for pull-requests is required for autolabeler
+      # otherwise, read permission is required at least
+      pull-requests: read
     runs-on: ubuntu-latest
     steps:
       - uses: release-drafter/release-drafter@v5