diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f331485..313ef2f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -60,6 +60,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
 
     env:
       PKG_VERSION: "" # will be set in the workflow
@@ -71,6 +72,7 @@ jobs:
         with:
           node-version: 22.x
           cache: "npm"
+          registry-url: 'https://registry.npmjs.org'
           scope: '@actions'
 
       - name: Parse version from lerna.json
@@ -97,13 +99,6 @@ jobs:
             core.summary.addLink(`Release v${{ env.PKG_VERSION }}`, release.data.html_url);
             await core.summary.write();
 
-      - name: setup authentication
-        run: echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" >> .npmrc
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-
       - name: Publish packages
         run: |
-          lerna publish ${{ env.PKG_VERSION }} --yes --no-git-reset --no-git-tag-version
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
\ No newline at end of file
+          lerna publish ${{ env.PKG_VERSION }} --yes --no-git-reset --no-git-tag-version
\ No newline at end of file