diff --git a/infrastructure/deploy-lambda.yml b/infrastructure/deploy-lambda.yml
index 26c65db6e..43b196273 100644
--- a/infrastructure/deploy-lambda.yml
+++ b/infrastructure/deploy-lambda.yml
@@ -102,6 +102,14 @@ Resources:
                   - scheduler:DeleteSchedule
                   - scheduler:ListSchedules
                 Resource: '*'
+        # Lambda self-invocation - process_repositories fans out one async invoke per repo
+        - PolicyName: LambdaSelfInvokeAccess
+          PolicyDocument:
+            Version: '2012-10-17'
+            Statement:
+              - Effect: Allow
+                Action: lambda:InvokeFunction
+                Resource: !Sub 'arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:${LambdaFunctionName}'
 
   # =============================================================================
   # CloudWatch Log Group
diff --git a/pyproject.toml b/pyproject.toml
index 2ed1c9138..583a121e2 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "GitAuto"
-version = "1.24.2"
+version = "1.24.3"
 requires-python = ">=3.14"
 dependencies = [
     "annotated-doc==0.0.4",
diff --git a/uv.lock b/uv.lock
index e5953d057..ba81bd557 100644
--- a/uv.lock
+++ b/uv.lock
@@ -596,7 +596,7 @@ wheels = [
 
 [[package]]
 name = "gitauto"
-version = "1.24.2"
+version = "1.24.3"
 source = { virtual = "." }
 dependencies = [
     { name = "annotated-doc" },