diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index e81c02f36a..7d594688f8 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -20,7 +20,7 @@ on:
         default: 'MetaMask bot'
     secrets:
       NPM_TOKEN:
-        required: true
+        required: false
       PUBLISH_PAGES_TOKEN:
         required: true
       SLACK_WEBHOOK_URL:
@@ -94,7 +94,7 @@ jobs:
         with:
           name: publish-release-artifacts-${{ github.sha }}
       - name: Dry run publish to NPM
-        uses: MetaMask/action-npm-publish@v5
+        uses: MetaMask/action-npm-publish@v6
         with:
           slack-webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
           subteam: ${{ inputs.slack-subteam }}
@@ -107,6 +107,9 @@ jobs:
     needs:
       - npm-publish-dry-run
       - get-release-tag
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - name: Checkout and setup environment
         uses: MetaMask/action-checkout-and-setup@v3
@@ -118,7 +121,7 @@ jobs:
         with:
           name: publish-release-artifacts-${{ github.sha }}
       - name: Publish ${{ needs.get-release-tag.outputs.tag }} to NPM
-        uses: MetaMask/action-npm-publish@v5
+        uses: MetaMask/action-npm-publish@v6
         with:
           npm-token: ${{ secrets.NPM_TOKEN }}
           npm-tag: ${{ needs.get-release-tag.outputs.tag }}