diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7b554140..38e7a280 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -3,6 +3,11 @@ on:
   push:
     branches:
       - master
+
+permissions:
+  id-token: write  # Required for OIDC
+  contents: write  # For Semantic Release tagging
+
 jobs:
   release:
     name: Release
@@ -19,7 +24,6 @@ jobs:
       - name: Install dependencies
         run: npm ci
       - name: Release
+        run: npx semantic-release@25
         env:
           GITHUB_TOKEN: ${{ secrets.OPENEDX_SEMANTIC_RELEASE_GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.OPENEDX_SEMANTIC_RELEASE_NPM_TOKEN }}
-        run: npx semantic-release