diff --git a/.github/workflows/ts_serialize_release.yml b/.github/workflows/ts_serialize_release.yml
index a63fbde9..3559e246 100644
--- a/.github/workflows/ts_serialize_release.yml
+++ b/.github/workflows/ts_serialize_release.yml
@@ -6,6 +6,11 @@ on:
   push:
     tags: ["v*.*.*"]
 
+# OIDC setup for trusted publishing
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   test:
     runs-on: ${{ matrix.os }}
@@ -76,9 +81,10 @@ jobs:
           draft: false
           prerelease: false
 
+      - name: Update npm to 11.5.1 or later for trusted publishing
+        run: npm install -g npm@latest
+
       - name: Deploy to NPM
         run: |
           cd dist
           npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}