diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index f899e84..8898eae 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -7,6 +7,7 @@ on:
 
 permissions:
   contents: write
+  id-token: write # Required for npm OIDC trusted publishers
 
 jobs:
   release:
@@ -29,6 +30,9 @@ jobs:
           node-version: '20'
           registry-url: 'https://registry.npmjs.org'
 
+      - name: Ensure latest npm (>= 11.5.1 for OIDC)
+        run: npm install -g npm@latest
+
       - name: Clean templates
         run: make clean-templates
 
@@ -41,5 +45,3 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GH_PAT }}
           GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}