diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index b9e423831..e260a89b9 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -5,3 +5,8 @@
 
 # Add specific rules below.
 # Lower the rule, higher the precedence
+
+# The release PRs that trigger publication to crates.io or PyPI always modify the changelog.
+# We require those PRs to be approved by someone with release permissions.
+hugr/CHANGELOG.md @aborgna-q @ss2165
+hugr-py/CHANGELOG.md @aborgna-q @ss2165
diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index 25a08b1d9..8b724ff7e 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -23,7 +23,6 @@ jobs:
         uses: dtolnay/rust-toolchain@stable
       - name: Run release-plz
         uses: MarcoIeni/release-plz-action@v0.5
-        with:
-          command: release-pr
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}