diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 30f65dc..f12705e 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -35,7 +35,10 @@ jobs:
 
       - name: Build and publish
         if: steps.check.outputs.published == 'false'
-        run: pnpm build && npm publish --access public --provenance
+        run: |
+          # Clear the placeholder token so npm uses OIDC instead
+          npm config set //registry.npmjs.org/:_authToken ""
+          pnpm build && npm publish --access public --provenance
 
       - name: Ensure git tag exists
         if: steps.check.outputs.published == 'false'