diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index 1a22c4c..b3fb805 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -8,7 +8,7 @@ on:
       - closed
 
 permissions:
-  contents: read
+  contents: write
 
 jobs:
   deploy:
diff --git a/pyproject.toml b/pyproject.toml
index 50cacac..c1e9096 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "zarr-checksum"
-version = "0.4.1"
+version = "0.4.2"
 description = "Checksum support for zarrs stored in various backends"
 readme="README.md"
 homepage="https://github.com/dandi/zarr_checksum"