diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 97fa829..f1eaeb2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,6 +14,7 @@ jobs:
     environment: npm-publish
     permissions:
       contents: write
+      id-token: write  # Required for npm OIDC trusted publishing
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -108,6 +109,4 @@ jobs:
           fail_on_unmatched_files: true
 
       - name: Publish to npm
-        env:
-          NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: bun publish --access public --no-git-checks