ci: go back to failing whoami check

Ticket: DX-2084

Author: tanjeemh

.github/workflows/release.yaml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       id-token: write
-      contents: write
+      contents: read
     steps:
       - uses: actions/checkout@v5
       - uses: actions/setup-node@v6
@@ -36,10 +36,10 @@ jobs:
         run: |
           echo "Running npm publish dry-run to test OIDC auth..."
           npm publish --dry-run --provenance
-  
+
   release:
     needs: [test-oidc-publish]
-    uses: tanjeemh/semantic-release-action-typescript/.github/workflows/release.yml@master
+    uses: semantic-release-action/typescript/.github/workflows/release.yml@1d40c29e2d500f3bcceeb13f95d26a3a1b571f51
     secrets:
       npm-token: "FAKE_NPM_TOKEN_FOR_SEMANTIC_RELEASE"
     with: