diff --git a/.github/workflows/publish-ide-docs.yml b/.github/workflows/publish-ide-docs.yml
index ed0cefe..1e17d37 100644
--- a/.github/workflows/publish-ide-docs.yml
+++ b/.github/workflows/publish-ide-docs.yml
@@ -8,6 +8,8 @@ on:
 jobs:
   publish_ide_docs:
     runs-on: ubuntu-22.04
+    permissions:
+      id-token: write
     steps:
     - name: Get version from tag
       run: |
@@ -32,7 +34,7 @@ jobs:
         poetry run python -m pip install --upgrade pip
         poetry run python -m pip install --upgrade setuptools
         poetry install --only=doc
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@v6
       with:
         node-version: '22.x'
         registry-url: 'https://registry.npmjs.org'
@@ -40,7 +42,5 @@ jobs:
       working-directory: npm/ide-docs
     - run: yarn build
       working-directory: npm/ide-docs
-    - run: yarn publish
+    - run: npm publish
       working-directory: npm/ide-docs
-      env:
-        NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}
diff --git a/.github/workflows/publish-jedi.yml b/.github/workflows/publish-jedi.yml
index 6d6222f..6d911b4 100644
--- a/.github/workflows/publish-jedi.yml
+++ b/.github/workflows/publish-jedi.yml
@@ -8,6 +8,8 @@ on:
 jobs:
   publish_jedi:
     runs-on: ubuntu-22.04
+    permissions:
+      id-token: write
     steps:
     - uses: actions/checkout@v6
     - name: Get version from tag
@@ -25,13 +27,11 @@ jobs:
     - name: Set pybricks-jedi version
       run: poetry version "$VERSION"
       working-directory: jedi
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@v6
       with:
         node-version: '22.x'
         registry-url: 'https://registry.npmjs.org'
     - run: ./build.py "$NPM_VERSION"
       working-directory: npm/jedi
-    - run: yarn publish
+    - run: npm publish
       working-directory: npm/jedi/build
-      env:
-        NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}