diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml
index 1ea971ee..14054f3e 100644
--- a/.github/workflows/gh-pages.yml
+++ b/.github/workflows/gh-pages.yml
@@ -5,17 +5,14 @@ on:
     branches: ["main"]
   workflow_dispatch:
 
-permissions:
-  contents: read
-  pages: write
-  id-token: write
-
 concurrency:
   group: "pages"
   cancel-in-progress: false
 
 jobs:
   build:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
diff --git a/doc/changes/changes.md b/doc/changes/changes.md
index 1c43bcd4..de1a438c 100644
--- a/doc/changes/changes.md
+++ b/doc/changes/changes.md
@@ -1,6 +1,6 @@
 # Changes
 
-* [4.5.0](changes_4.5.0.md)
+* [4.6.0](changes_4.5.0.md)* [4.6.0](changes_4.5.0.md)
 * [4.4.0](changes_4.4.0.md)
 * [4.3.0](changes_4.3.0.md)
 * [4.2.3](changes_4.2.3.md)
diff --git a/doc/changes/changes_4.6.0.md b/doc/changes/changes_4.6.0.md
new file mode 100644
index 00000000..4368a932
--- /dev/null
+++ b/doc/changes/changes_4.6.0.md
@@ -0,0 +1,11 @@
+# OpenFastTrace 4.6.0, released 2026-06-??
+
+Code name: ??
+
+## Summary
+
+We moved some GitHub action permissions from workflow-level to job-level.
+
+## Security
+
+* #
\ No newline at end of file