diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 23850eb..0037e2a 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -9,7 +9,8 @@ on:
       - "**"
 
 permissions:
-  contents: write # we need to read secrets
+  id-token: write
+  contents: read # we need to read secrets
 
 jobs:
   test:
@@ -21,7 +22,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 24
 
       - name: Install dependencies
         run: yarn install
@@ -77,7 +78,7 @@ jobs:
       - uses: actions/setup-node@v4
         if: steps.semantic.outputs.new_release_published == 'true'
         with:
-          node-version: 20.x
+          node-version: 24.x
           cache: 'npm'
           registry-url: 'https://registry.npmjs.org'
           scope: '@staffbase'
@@ -86,5 +87,3 @@ jobs:
         if: steps.semantic.outputs.new_release_published == 'true' && github.ref != 'refs/heads/alpha'
         run: |
           npm publish --registry=https://registry.npmjs.org --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}