diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml
index d7108f6b..f2ffb192 100644
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@@ -10,9 +10,7 @@ on:
     branches: docs-build
 env:
   GRADLE_ENTERPRISE_SECRET_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_SECRET_ACCESS_KEY }}
-permissions:
-  contents: write
-  actions: write
+permissions: read-all
 jobs:
   build:
     if: github.repository_owner == 'spring-projects'
diff --git a/antora-playbook.yml b/antora-playbook.yml
index 3048f03f..aebf4067 100644
--- a/antora-playbook.yml
+++ b/antora-playbook.yml
@@ -18,8 +18,8 @@ content:
     - url: https://github.com/spring-projects/spring-pulsar
       # Refname matching:
       # https://docs.antora.org/antora/latest/playbook/content-refname-matching/
-      branches: [ main ]
-      tags: [ 'v({1..9}).+({0..9}).+({0..9})?(-{RC,M}+({0..9}))' ]
+      branches: [ main, '({1..9}).+({0..9}).x' ]
+      tags: [ 'v({1..9}).+({0..9}).+({0..9})?(-{RC,M}+({0..9}))', '!(v1.0.0-M({0..2}))']
       start_path: spring-pulsar-docs/src/main/antora
 asciidoc:
   attributes: