diff --git a/.github/workflows/eslint.yml b/.github/workflows/eslint.yml
index a8647e4..cae7a7b 100644
--- a/.github/workflows/eslint.yml
+++ b/.github/workflows/eslint.yml
@@ -9,7 +9,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [20.x]
+        node-version: [24.x]
 
     steps:
       - uses: actions/checkout@v4
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index 7bae146..c2d924e 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -3,6 +3,10 @@
 
 name: Node.js Package
 
+permissions:
+  id-token: write
+  contents: read
+
 on:
   release:
     types: [created]
@@ -14,7 +18,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 24
       - run: npm ci
       - run: npm test && npm run prepack
 
@@ -25,9 +29,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 24
           registry-url: https://registry.npmjs.org/
       - run: npm ci
-      - run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.npm_token}}
+      - run: npm publish --provenance
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index fd17146..ab78d95 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -9,7 +9,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [18.x, 20.x, 22.x]
+        node-version: [20.x, 22.x, 24.x]
 
     steps:
       - uses: actions/checkout@v4
diff --git a/.github/workflows/ts-compile.yml b/.github/workflows/ts-compile.yml
index eeb692d..495ef15 100644
--- a/.github/workflows/ts-compile.yml
+++ b/.github/workflows/ts-compile.yml
@@ -9,7 +9,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [20.x]
+        node-version: [24.x]
 
     steps:
       - uses: actions/checkout@v4
diff --git a/package.json b/package.json
index cdf482f..21217b1 100644
--- a/package.json
+++ b/package.json
@@ -10,7 +10,7 @@
     "homepage": "https://github.com/descript-org/descript",
     "repository": {
         "type": "git",
-        "url": "git://github.com/descript-org/descript.git"
+        "url": "git+https://github.com/descript-org/descript.git"
     },
     "bugs": {
         "url": "https://github.com/descript-org/descript/issues"
@@ -43,5 +43,8 @@
     "license": "MIT",
     "dependencies": {
         "@fengkx/zstd-napi": "^0.1.0"
+    },
+    "publishConfig": {
+        "provenance": true
     }
 }