diff --git a/.github/workflows/audit-javascript.yml b/.github/workflows/audit-javascript.yml
index fa472f158..83c388777 100644
--- a/.github/workflows/audit-javascript.yml
+++ b/.github/workflows/audit-javascript.yml
@@ -31,6 +31,7 @@ concurrency:
 
 permissions:
   contents: read
+  checks: write
 
 jobs:
   audit-js:
diff --git a/.github/workflows/audit-rust.yml b/.github/workflows/audit-rust.yml
index 5d0cda57d..cba74aef8 100644
--- a/.github/workflows/audit-rust.yml
+++ b/.github/workflows/audit-rust.yml
@@ -31,6 +31,7 @@ concurrency:
 
 permissions:
   contents: read
+  checks: write
 
 jobs:
   audit-rust:
diff --git a/Cargo.lock b/Cargo.lock
index b73674a00..9e8955f84 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2551,9 +2551,9 @@ dependencies = [
 
 [[package]]
 name = "h2"
-version = "0.4.9"
+version = "0.4.19"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "75249d144030531f8dee69fe9cea04d3edf809a017ae445e2abdff6629e86633"
+checksum = "ef8e5e5a340588f4452631496976cf8636d4a7ecf600239fdc27615d2530bc16"
 dependencies = [
  "atomic-waker",
  "bytes",