diff --git a/.github/workflows/stats.yml b/.github/workflows/stats.yml
index d3ffb7aff..b3969775a 100644
--- a/.github/workflows/stats.yml
+++ b/.github/workflows/stats.yml
@@ -8,10 +8,11 @@ jobs:
   stats:
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       pull-requests: write
     steps:
       - name: Run pull request stats
-        uses: flowwer-dev/pull-request-stats@v2.5.0
+        uses: flowwer-dev/pull-request-stats@v2.11.0
         with:
           period: 30 # 30 days of review stats
           charts: true