diff --git a/.github/workflows/dart_ci.yml b/.github/workflows/dart_ci.yml
index 51cf02b87..69b79307d 100644
--- a/.github/workflows/dart_ci.yml
+++ b/.github/workflows/dart_ci.yml
@@ -11,6 +11,11 @@ on:
     branches:
       - '**'
 
+permissions:
+  contents: write
+  id-token: write
+  pull-requests: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d7a7bc5e2..2f820a047 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,8 @@
 # OverReact Changelog
 
+## 5.3.3
+- [#951] Internal CI fixes
+
 ## 5.3.2
 - [#948] Fix late required prop linting not working in non-null-safe libraries
 - [#949] Add docs around migrating connect and wrapper components, improve helpfulness of required prop lints and runtime errors
diff --git a/pubspec.yaml b/pubspec.yaml
index b8427dbc3..fc56d6216 100644
--- a/pubspec.yaml
+++ b/pubspec.yaml
@@ -1,5 +1,5 @@
 name: over_react
-version: 5.3.2
+version: 5.3.3
 description: A library for building statically-typed React UI components using Dart.
 homepage: https://github.com/Workiva/over_react/
 environment:
diff --git a/tools/analyzer_plugin/pubspec.yaml b/tools/analyzer_plugin/pubspec.yaml
index 13b8c582e..331e23ac3 100644
--- a/tools/analyzer_plugin/pubspec.yaml
+++ b/tools/analyzer_plugin/pubspec.yaml
@@ -13,7 +13,7 @@ dependencies:
   # Upon release, this should be pinned to the over_react version from ../../pubspec.yaml
   # so that it always resolves to the same version of over_react that the user has pulled in,
   # and thus has the same boilerplate parsing code that's running in the builder.
-  over_react: 5.3.2
+  over_react: 5.3.3
   path: ^1.5.1
   source_span: ^1.7.0
   yaml: ^3.0.0