diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c9e681b..e0e73e3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -45,3 +45,5 @@ jobs:
           commit: 'chore: version packages'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # npm reads this to emit provenance (needs id-token: write, set above).
+          NPM_CONFIG_PROVENANCE: true
diff --git a/package.json b/package.json
index 6eae7c5..22283f6 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
 		"ci": "biome ci . && tsc --noEmit && ava",
 		"changeset": "changeset",
 		"version-packages": "changeset version && pnpm build:docs",
-		"release": "pnpm run build && changeset publish --provenance"
+		"release": "pnpm run build && changeset publish"
 	},
 	"keywords": [
 		"pathist",