diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index e476836..f202807 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -32,6 +32,9 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      - name: Upgrade npm CLI for Trusted Publishing OIDC
+        run: npm install -g npm@latest
+
       - name: Run type check
         run: npm run typecheck
 
@@ -47,8 +50,6 @@ jobs:
 
       - name: Publish to NPM
         run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Create GitHub Release
         if: startsWith(github.ref, 'refs/tags/v')
diff --git a/package-lock.json b/package-lock.json
index a178d2a..d176901 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@deco-cx/warp-node",
-  "version": "0.3.22",
+  "version": "0.3.23",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@deco-cx/warp-node",
-      "version": "0.3.22",
+      "version": "0.3.23",
       "license": "MIT",
       "dependencies": {
         "undici": "^6.21.0",
diff --git a/package.json b/package.json
index a8f036f..965822b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@deco-cx/warp-node",
-  "version": "0.3.22",
+  "version": "0.3.23",
   "description": "WebSocket tunneling library for Node.js and other runtimes",
   "type": "module",
   "main": "dist/mod.js",