diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 788828f..e62da18 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -6,27 +6,21 @@ on:
       - 'v*'
 
 jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v1
-      - uses: actions/setup-node@v1
-        with:
-          node-version: 12
-      - run: npm ci
-      - run: npm run lint
-      - run: npm test
-
   publish-npm:
-    needs: build
+    if: startsWith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v1
-      - uses: actions/setup-node@v1
-        with:
-          node-version: 12
-          registry-url: https://registry.npmjs.org/
-      - run: npm ci
-      - run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
\ No newline at end of file
+      - name: checkout
+        uses: actions/checkout@v5
+
+      - name: set up node and pnpm
+        run: |
+          corepack enable
+          pnpm config set '//registry.npmjs.org/:_authToken' "${{ secrets.NPM_TOKEN }}"
+          pnpm config set '//npm.pkg.github.com/:_authToken' "${{ secrets.GITHUB_TOKEN }}"
+          pnpm i
+
+      - name: publish
+        run: |
+          pnpm publish --registry https://npm.pkg.github.com --no-git-checks
+          pnpm publish --registry https://registry.npmjs.org --no-git-checks
diff --git a/package.json b/package.json
index f6f8864..080542b 100644
--- a/package.json
+++ b/package.json
@@ -25,5 +25,14 @@
     "esm": "^3.2.25",
     "mocha": "^6.2.2",
     "sinon": "^7.5.0"
+  },
+  "packageManager": "pnpm@10.33.0",
+  "repository": "https://github.com/beyonk/sapper-rbac.git",
+  "devEngines": {
+    "runtime": {
+      "name": "node",
+      "version": "25.9.0",
+      "onFail": "error"
+    }
   }
 }