diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 041282d..a177293 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,12 +14,19 @@ jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
         with:
           token: ${{ secrets.GH_TOKEN_PULL_REQUESTS }}
 
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+
       - uses: pnpm/action-setup@v4
         name: Install pnpm
         id: pnpm-setup
@@ -40,4 +47,3 @@ jobs:
           title: 'chore: update package versions'
         env:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN_PULL_REQUESTS }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN_ELEVATED }}
diff --git a/.npmrc b/.npmrc
index 8638f02..3394608 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1 +1,2 @@
 auto-install-peers = false
+provenance = true