diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c424eca9..95e13231 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,11 +6,14 @@ on:
 jobs:
   build-deploy:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
     steps:
     - uses: actions/checkout@v3
     - uses: actions/setup-node@v3
       with:
-        node-version: 16
+        node-version: 18
         registry-url: 'https://registry.npmjs.org'
 
     - run: npm install
@@ -25,7 +28,7 @@ jobs:
           Home: index.html
         EOF
 
-    - run: npm install idoc@1.26.6 -g
+    - run: npm install idoc@1.27.2 -g
     - run: idoc
 
     - run: npm i coverage-badges-cli -g
@@ -79,7 +82,7 @@ jobs:
 
           ${{ steps.changelog.outputs.changelog }}
 
-    - run: npm publish --access public
+    - run: npm publish --access public --provenance
       continue-on-error: true
       working-directory: core
       env: