diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 4cc6f61..3ec519c 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -7,6 +7,9 @@ on:
 jobs:
     deploy:
         if: github.event.pull_request.merged
+        permissions:
+            id-token: write  # Required for OIDC
+            contents: read
         runs-on: ubuntu-latest
         steps:
             - uses: actions/checkout@v4
@@ -14,16 +17,14 @@ jobs:
                 ref: release
             - run: npm ci
             - run: npm run build
-            - uses: JS-DevTools/npm-publish@v3
-              with:
-                token: ${{ secrets.NPM_TOKEN }}
+            - run: npm publish
 
     updateDocs:
         if: github.event.pull_request.merged
         # Grant GITHUB_TOKEN the permissions required to make a Pages deployment
         permissions:
-            pages: write      # to deploy to Pages
             id-token: write   # to verify the deployment originates from an appropriate source
+            pages: write      # to deploy to Pages
         runs-on: ubuntu-latest
         steps:
             - uses: actions/checkout@v4