From 02e082d0a7ff9fcc6bfbab57cb6321d06840792d Mon Sep 17 00:00:00 2001
From: Louis Lam <louislam@users.noreply.github.com>
Date: Wed, 18 Feb 2026 14:39:52 +0800
Subject: [PATCH] fix: npm dependency update GitHub workflow (#6970)

---
 .github/workflows/npm-update.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/npm-update.yml b/.github/workflows/npm-update.yml
index ad674011..8d5853a9 100644
--- a/.github/workflows/npm-update.yml
+++ b/.github/workflows/npm-update.yml
@@ -5,7 +5,9 @@ on:
   schedule:
     - cron: "0 0 * * *"  # Run daily at midnight UTC
 
-permissions: {}
+permissions:
+  contents: write
+  pull-requests: write
 
 jobs:
   npm-update:
@@ -29,7 +31,7 @@ jobs:
           node-version: 20
 
       - name: Run npm update
-        run: npm update
+        run: npm update --package-lock-only
 
       - name: Check if there are changes
         id: check_changes