diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index beeb3c34..b5ffe3df 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -39,6 +39,12 @@ jobs:
         with:
           bun-version-file: .bun-version
 
+      - name: Setup Node.js (for npm with OIDC support)
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          registry-url: 'https://registry.npmjs.org'
+
       - name: Configure git
         run: |
           git config user.name "github-actions[bot]"
@@ -249,11 +255,6 @@ jobs:
           echo "  Already published: ${{ steps.check_published.outputs.published }}"
           npm pack --dry-run
 
-      - name: Setup NPM authentication
-        if: ${{ !inputs.dry_run && steps.check_published.outputs.published == 'false' }}
-        run: |
-          echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
-
       - name: Publish to NPM
         if: ${{ !inputs.dry_run && steps.check_published.outputs.published == 'false' }}
         working-directory: packages/uniwind