diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 1c16f80..d36b846 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -48,4 +48,4 @@ jobs:
 
   build:
     name: Build rock
-    uses: canonical/data-platform-workflows/.github/workflows/build_rock.yaml@v16
+    uses: canonical/data-platform-workflows/.github/workflows/build_rock.yaml@v17
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 9f6d883..5a6d943 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -15,17 +15,18 @@ on:
 jobs:
   build:
     name: Build rock
-    uses: canonical/data-platform-workflows/.github/workflows/build_rock.yaml@v16
+    uses: canonical/data-platform-workflows/.github/workflows/build_rock.yaml@v17
 
   release:
     name: Release rock
     needs:
       - build
-    uses: canonical/data-platform-workflows/.github/workflows/release_rock.yaml@v16
+    uses: canonical/data-platform-workflows/.github/workflows/release_rock.yaml@v17
     with:
       artifact-prefix: ${{ needs.build.outputs.artifact-prefix }}
     permissions:
       packages: write  # Needed to publish to GitHub Container Registry
+      contents: write  # Needed to create GitHub release
 
   sbom:
     name: Generate Software Bill of Materials
diff --git a/.github/workflows/sync_issue_to_jira.yaml b/.github/workflows/sync_issue_to_jira.yaml
index b0e0cc2..3401a3a 100644
--- a/.github/workflows/sync_issue_to_jira.yaml
+++ b/.github/workflows/sync_issue_to_jira.yaml
@@ -9,7 +9,7 @@ on:
 jobs:
   sync:
     name: Sync GitHub issue to Jira
-    uses: canonical/data-platform-workflows/.github/workflows/sync_issue_to_jira.yaml@v16
+    uses: canonical/data-platform-workflows/.github/workflows/sync_issue_to_jira.yaml@v17
     with:
       jira-base-url: https://warthogs.atlassian.net
       jira-project-key: DPE