diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cbcf16dc..8d2b91b6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,13 +12,13 @@ jobs:
       - uses: actions/setup-node@v7
         with:
           node-version: 26.x
-          cache: npm
+          package-manager-cache: false
           registry-url: https://registry.npmjs.org
+      - run: npm install --global npm@11.21.0
       - run: npm ci
       - run: npm run build
-      - run: npm publish --provenance
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+      # Authenticates with npm Trusted Publishing (OIDC); no NPM_TOKEN needed.
+      - run: npm stage publish --provenance
   PublishJsr:
     runs-on: ubuntu-latest
     permissions: