diff --git a/.github/workflows/auto-pr.yml b/.github/workflows/auto-pr.yml
new file mode 100644
index 0000000..c00532d
--- /dev/null
+++ b/.github/workflows/auto-pr.yml
@@ -0,0 +1,30 @@
+name: Auto PR dev -> main
+
+on:
+  push:
+    branches: [dev]
+
+jobs:
+  open-pr:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Open PR dev -> main if not exists
+        env:
+          GH_TOKEN: ${{ secrets.PAT_TOKEN }}
+        run: |
+          PR=$(gh pr list --base main --head dev --state open --json number -q '.[0].number')
+          if [ -z "$PR" ]; then
+            gh pr create \
+              --base main \
+              --head dev \
+              --title "chore: merge dev into main" \
+              --body "### Auto-generated PR
+          Merge latest \`dev\` changes into \`main\` to trigger a release.
+
+          > Squash and merge to keep a clean history."
+            echo "PR created."
+          else
+            echo "PR #$PR already open, skipping."
+          fi
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 10d3555..60fa746 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -38,5 +38,5 @@ jobs:
       - name: Release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: 'true'
         run: npx semantic-release