diff --git a/.github/workflows/promote-release.yml b/.github/workflows/promote-release.yml
index 003d918e1..b7ad31f50 100644
--- a/.github/workflows/promote-release.yml
+++ b/.github/workflows/promote-release.yml
@@ -22,7 +22,6 @@ jobs:
         with:
           app-id: ${{ secrets.DEVSY_GITHUB_APP_ID }}
           private-key: ${{ secrets.DEVSY_GITHUB_APP_PRIVATE_KEY }}
-          permission-contents: write
 
       - uses: actions/checkout@v6
         with:
@@ -77,16 +76,15 @@ jobs:
 
       - name: create stable release
         uses: softprops/action-gh-release@v3
-        env:
-          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
         with:
+          token: ${{ steps.app-token.outputs.token }}
           tag_name: ${{ steps.version.outputs.stable_tag }}
           target_commitish: ${{ steps.version.outputs.commit_sha }}
           name: ${{ steps.version.outputs.stable_tag }}
           body: ${{ steps.rc_notes.outputs.body }}
           draft: false
           prerelease: false
-          make_latest: "legacy"
+          make_latest: true
 
       - name: trigger full rebuild
         env: