diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 15f3ecf..5234f68 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,25 +1,23 @@
 name: release
-
-env:
-  NODE_JS_VERSION: 20.19.5
-
 on:
   release:
-    types: [ created ]
-
+    types: [created]
+env:
+  NODE_JS_VERSION: 20.19.5
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write  # Required for OIDC
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v2
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_JS_VERSION }}
           registry-url: 'https://registry.npmjs.org'
-
-      - run: yarn install --frozen-lockfile
+      - run: npm ci
       - run: yarn prepare
-      - run: npm ci --legacy-peer-deps
-      - run: npm publish --access public
+      - run: npm publish --access public --provenance
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}  # Granular token
\ No newline at end of file