diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 41627724..646ba65b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -3,6 +3,17 @@ on:
   push:
     branches:
       - 'main'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  id-token: write # Required for OIDC
+  contents: read
+  checks: write
+  statuses: write
+
 jobs:
   release:
     name: Final
@@ -18,16 +29,16 @@ jobs:
           persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
-          node-version: 14.x
+          node-version: 24
 
       - name: Install dependencies
         run: yarn
 
       - name: Create release pull request or publish to npm
         id: changesets
-        uses: changesets/action@master
+        uses: changesets/action@v1
         with:
           title: Release Tracking
           # This expects you to have a script called release which does a build for your packages and calls changeset publish
@@ -35,4 +46,3 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GPR_AUTH_TOKEN_SHARED }}
           VSCE_PAT: ${{ secrets.VSCE_PUBLISHER_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_AUTH_TOKEN_SHARED }}