diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 68f22a7..bb8a154 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -39,9 +39,10 @@ jobs:
         run: pnpm install
 
       - name: Publish
-        uses: JS-DevTools/npm-publish@v3
+        uses: JS-DevTools/npm-publish@v4
         with:
-          token: empty
+          # token: empty # unnecessary if you use trusted publishing via OIDC
+          provenance: true
 
       - name: Create GitHub Release
         uses: ncipollo/release-action@v1