diff --git a/.github/workflows/release-rubygem.yml b/.github/workflows/release-rubygem.yaml
similarity index 58%
rename from .github/workflows/release-rubygem.yml
rename to .github/workflows/release-rubygem.yaml
index 966890bc..b9bba57e 100644
--- a/.github/workflows/release-rubygem.yml
+++ b/.github/workflows/release-rubygem.yaml
@@ -1,4 +1,4 @@
-name: Release ruby gem
+name: Release RubyGems
 
 permissions: {}
 
@@ -12,6 +12,9 @@ jobs:
     name: Publish Ruby Gem
     runs-on: ubuntu-latest
     environment: Release
+    permissions:
+      id-token: write
+      contents: read
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
@@ -19,10 +22,9 @@ jobs:
       - uses: ./.github/actions/prepare
       - uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # v1.307.0
         with:
-          ruby-version: '4.0.4'
+          ruby-version: '4.0.3'
           working-directory: ruby
-      - name: Publish ruby gem
-        uses: cucumber/action-publish-rubygem@d8918cbdee789cfc78f346a96a59596b87795be1 # v1.0.0
+      - uses: rubygems/configure-rubygems-credentials@762a4b77c3300434bb57c7ce80b20e36231927aa # v2.0.0
+      - uses: cucumber/action-publish-rubygem@4e79bb9aed597c835e8438f57c04d0996ab80d72 # v2.0.0
         with:
-          working_directory: ruby
-          rubygems_api_key: ${{ secrets.RUBYGEMS_API_KEY }}
+          working-directory: ruby