diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index dc380e4..f2a93bc 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -33,7 +33,6 @@ jobs:
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 24
-          registry-url: https://registry.npmjs.org
           package-manager-cache: false
 
       # Trusted publishing (OIDC and automatic provenance) requires `npm` 11.5.1 or newer.
@@ -98,6 +97,9 @@ jobs:
         if: steps.plan.outputs.private != 'true' && steps.plan.outputs.published != 'true'
         env:
           TAG: ${{ steps.plan.outputs.tag }}
+          NPM_TOKEN: ""
+          NODE_AUTH_TOKEN: ""
+          NPM_CONFIG_LOGLEVEL: verbose
         run: |
           # `npm` is the registry's own client and the one that performs trusted publishing.
           # nosemgrep: disallow-npm-npx