diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml
index e027698..54be188 100644
--- a/.github/actions/setup/action.yml
+++ b/.github/actions/setup/action.yml
@@ -9,10 +9,6 @@ runs:
       with:
         node-version-file: .nvmrc
 
-    - name: Update npm
-      run: npm install -g npm@latest
-      shell: bash
-
     - name: Restore dependencies
       id: yarn-cache
       uses: actions/cache/restore@v4.2.4
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 35e19d4..54f7876 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -4,6 +4,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   build-library:
     runs-on: macos-latest