diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1b45e40..8fb30a1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -73,7 +73,7 @@ jobs:
       - name: Build
         run: yarn build
 
-      - name: Install semantic-release
+      - name: Install semantic-release (no @semantic-release/npm — OIDC via publishCmd)
         run: |
           npm install -g \
             semantic-release@24 \
diff --git a/.releaserc.json b/.releaserc.json
index ed28734..86b5cd8 100644
--- a/.releaserc.json
+++ b/.releaserc.json
@@ -23,11 +23,8 @@
       "changelogFile": "CHANGELOG.md"
     }],
     ["@semantic-release/exec", {
-      "prepareCmd": "npm pkg set version=${nextRelease.version}"
-    }],
-    ["@semantic-release/npm", {
-      "npmPublish": true,
-      "tarballDir": "dist-tarball"
+      "prepareCmd": "npm pkg set version=${nextRelease.version}",
+      "publishCmd": "npm publish --provenance --access public"
     }],
     ["@semantic-release/git", {
       "assets": ["CHANGELOG.md", "package.json"],