diff --git a/.github/workflows/pr-dependabot.yml b/.github/workflows/pr-dependabot.yml
index f0c7f03..992cc73 100644
--- a/.github/workflows/pr-dependabot.yml
+++ b/.github/workflows/pr-dependabot.yml
@@ -3,6 +3,7 @@ on: pull_request
 
 permissions:
   pull-requests: write
+  contents: write
 
 jobs:
   dependabot:
@@ -11,7 +12,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d
+        uses: dependabot/fetch-metadata@v1
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
       - name: Approve a PR