diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml
index 59f84bce..7250f336 100644
--- a/.github/workflows/node.js.yml
+++ b/.github/workflows/node.js.yml
@@ -19,7 +19,7 @@ jobs:
     strategy:
       max-parallel: 1
       matrix:
-        node-version: [18, 20]
+        node-version: [20]
 
     steps:
     - uses: actions/checkout@v4
@@ -27,9 +27,9 @@ jobs:
       uses: actions/setup-node@v4
       with:
         node-version: ${{ matrix.node-version }}
-    - uses: supercharge/redis-github-action@1.4.0
+    - uses: supercharge/redis-github-action@1.8.1
       with:
-        redis-version: 6
+        redis-version: 7
     - name: Install & Setup InfluxDB
       run: |
         cd /tmp
@@ -51,6 +51,7 @@ jobs:
           --force
         influx write --bucket dyne --file test/fixtures/influxdb_data.lp
     - run: yarn
+    - run: rm -rf node_modules/@types/glob || true
     - run: yarn build
     - run: yarn test
     - uses: codecov/codecov-action@v3
@@ -61,6 +62,9 @@ jobs:
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/master'
     needs: build
+    permissions:
+      contents: write
+      id-token: write 
     steps:
     - uses: actions/checkout@v4
       with:
@@ -75,12 +79,9 @@ jobs:
     - run: yarn build
     - run: git update-index --assume-unchanged package.json
     - name: Install lerna globally
-      run: npm install --global --loglevel=error lerna@6.6.1
+      run: npm install --global --loglevel=error lerna@latest
     - name: Authenticate with Registry and publish
       run: |
-          yarn logout
-          echo "//registry.npmjs.org/:_authToken=$NODE_AUTH_TOKEN" > .npmrc
-          npm whoami
-          lerna publish --no-verify-access -c -y --pre-dist-tag next --preid $(git rev-parse --short HEAD) --force-publish=*
-      env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          # No manual .npmrc creation or 'npm whoami' needed.
+          # Lerna v9+ automatically detects the OIDC environment.
+          lerna publish --no-verify-access -c -y --pre-dist-tag next --preid $(git rev-parse --short HEAD) --force-publish=*
\ No newline at end of file