diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7a768f5f..c08c179c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -53,6 +53,8 @@ jobs:
         needs: [compile, test]
         if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
         runs-on: ubuntu-latest
+        permissions:
+            id-token: write
         steps:
             - name: Checkout repo
               uses: actions/checkout@v4
@@ -73,13 +75,13 @@ jobs:
 
             - name: Publish to npm
               run: |
-                  npm config set //registry.npmjs.org/:_authToken ${NPM_TOKEN}
+                  publish() {
+                    npx -y npm@latest publish "$@"
+                  }
                   if [[ ${GITHUB_REF} == *alpha* ]]; then
-                    npm publish --access public --tag alpha
+                    publish --access public --tag alpha
                   elif [[ ${GITHUB_REF} == *beta* ]]; then
-                    npm publish --access public --tag beta
+                    publish --access public --tag beta
                   else
-                    npm publish --access public
-                  fi
-              env:
-                  NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+                    publish --access public
+                  fi
\ No newline at end of file