diff --git a/.github/workflows/CI.yaml b/.github/workflows/CI.yaml
index a0c79ab..29ea7af 100644
--- a/.github/workflows/CI.yaml
+++ b/.github/workflows/CI.yaml
@@ -22,4 +22,3 @@ jobs:
     permissions:
       id-token: write
       contents: read
-    secrets: inherit
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 7860a55..3ca50a3 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -29,9 +29,21 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+      - name: Extract version from tag
+        id: version
+        run: |
+          VERSION=${GITHUB_REF#refs/tags/v}
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "Publishing version: $VERSION"
+
+      - name: Update package.json version
+        run: |
+          pnpm version ${{ steps.version.outputs.version }} --no-git-tag-version
+
       - name: Build package
         run: pnpm build
 
-      - uses: simenandre/publish-with-pnpm@v2
-        with:
-          npm-auth-token: ${{ secrets.NPM_TOKEN }}
+      - name: Publish to NPM
+        run: pnpm publish --access public --provenance --no-git-checks
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}