diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index d21ada6..1385ede 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -3,6 +3,8 @@ on:
     branches:
       - main
 name: docs
+permissions:
+  contents: read # This applies to all jobs
 jobs:
   docs:
     runs-on: ubuntu-latest
@@ -12,7 +14,7 @@ jobs:
     - name: Setup Python
       uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5
       with:
-        python-version: "3.9"
+        python-version: "3.10"
     - name: Install nox
       run: |
         python -m pip install --upgrade setuptools pip wheel
@@ -35,4 +37,4 @@ jobs:
         python -m pip install nox
     - name: Run docfx
       run: |
-        nox -s docfx
\ No newline at end of file
+        nox -s docfx
diff --git a/noxfile.py b/noxfile.py
index 172e182..2ad8aec 100644
--- a/noxfile.py
+++ b/noxfile.py
@@ -36,7 +36,7 @@
 nox.options.error_on_missing_interpreters = True
 
 
-@nox.session(python="3.9")
+@nox.session(python="3.10")
 def docs(session):
     """Build the docs for this library."""