diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 03a73fd3..6f78503a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -214,8 +214,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 60
     permissions:
-      contents: write
-      pull-requests: write
+      contents: read
+      pull-requests: write # for gh pr review --approve
     steps:
       - uses: taiki-e/checkout-action@v1
       - name: Install Rust
@@ -231,13 +231,12 @@ jobs:
       - id: diff
         run: tools/ci/manifest.sh
         if: github.repository_owner == 'taiki-e' && (github.event_name == 'schedule' || github.event_name == 'push' && github.ref == 'refs/heads/main')
-      - name: Create PR
-        id: create-pull-request
-        uses: peter-evans/create-pull-request@v6
+      - id: create-pull-request
+        uses: peter-evans/create-pull-request@v7
         with:
           title: Update manifest
           body: |
-            Auto-generated by [create-pull-request](https://github.com/peter-evans/create-pull-request).
+            Auto-generated by CI using [create-pull-request](https://github.com/peter-evans/create-pull-request).
 
             This will be auto-merged when CI has passed because this is an auto-generated PR in a defined format and is usually considered no additional review is required.
           branch: update-manifest