diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 63ebc6ab..8e5cd289 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -16,6 +16,7 @@ permissions:
   contents: write
   pull-requests: write
   issues: write
+  id-token: write # to enable use of OIDC for trusted publishing and npm provenance
 
 jobs:
   build:
@@ -56,7 +57,5 @@ jobs:
       - run: npx semantic-release --branches main
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # to make the push failure
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
         name: Release
         working-directory: driver
diff --git a/driver/package.json b/driver/package.json
index 83c83617..4e33baf7 100644
--- a/driver/package.json
+++ b/driver/package.json
@@ -68,7 +68,7 @@
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/git": "^10.0.1",
     "eslint": "^9.17.0",
-    "semantic-release": "^24.2.8",
+    "semantic-release": "^25.0.2",
     "ts-node": "^10.9.1",
     "typescript": "~5.9"
   },