diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a7f2470..4121d26 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -21,13 +21,14 @@ jobs:
     publish-npm:
         needs: test
         runs-on: ubuntu-22.04
+        permissions:
+            id-token: write # required for publishing
         steps:
             - uses: actions/checkout@v2
             - uses: actions/setup-node@v2
               with:
                   node-version: 22
                   registry-url: https://registry.npmjs.org/
+            - run: npm install -g yarn@latest
             - run: yarn
             - run: yarn publish
-              env:
-                  NODE_AUTH_TOKEN: ${{secrets.npm_token}}