diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3a98cae1a..8852b8479 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -2,7 +2,7 @@ name: Release
 on:
   push: { tags: 'v[0-9]+.[0-9]+.[0-9]+*' }
 
-permissions: {contents:read}
+permissions: {contents: read}
 
 jobs:
   release:
diff --git a/.github/workflows/sync-default-branch.yml b/.github/workflows/sync-default-branch.yml
index 692d64142..8f2e71812 100644
--- a/.github/workflows/sync-default-branch.yml
+++ b/.github/workflows/sync-default-branch.yml
@@ -3,7 +3,7 @@ on:
   push: { branches: main }
   workflow_dispatch:
 
-permissions: {contents:write}
+permissions: {contents: write}
 
 jobs:
   sync:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index b8f781fca..959c8031e 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -5,7 +5,7 @@ on:
   schedule: [{cron: '0 0 10 * *'}] # monthly https://crontab.guru/#0_0_10_*_*
   workflow_dispatch:
 
-permissions: {contents:read}
+permissions: {contents: read}
 
 jobs:
   test:
diff --git a/.github/workflows/version.yml b/.github/workflows/version.yml
index 4840422f3..36301f986 100644
--- a/.github/workflows/version.yml
+++ b/.github/workflows/version.yml
@@ -3,7 +3,7 @@ on:
   schedule: [{ cron: '0 10 * * *' }] # daily: https://crontab.guru/#0_10_*_*_*
   workflow_dispatch:
 
-permissions: {contents:read}
+permissions: {contents: read}
 
 jobs:
   bump: