diff --git a/.github/workflows/alpha-release.yml b/.github/workflows/alpha-release.yml
index abd69935..05b0c9d2 100644
--- a/.github/workflows/alpha-release.yml
+++ b/.github/workflows/alpha-release.yml
@@ -17,7 +17,7 @@ jobs:
 
             - uses: actions/setup-node@v4
               with:
-                  node-version: 18
+                  node-version: 20.x
 
             - name: Build
               run: |
diff --git a/.github/workflows/npm-deploy.yml b/.github/workflows/npm-deploy.yml
index 86ce9274..fa06e61d 100644
--- a/.github/workflows/npm-deploy.yml
+++ b/.github/workflows/npm-deploy.yml
@@ -35,7 +35,7 @@ jobs:
         runs-on: ubuntu-latest
         strategy:
             matrix:
-                node-version: [18.x, 20.x]
+                node-version: [18.x, 20.x, 22.x]
 
         steps:
             - uses: actions/checkout@v4
@@ -61,13 +61,16 @@ jobs:
         needs: test
 
         runs-on: ubuntu-latest
+        permissions:
+            id-token: write
+
         if: ${{ !github.event.release.prerelease }}
 
         steps:
             - uses: actions/checkout@v4
             - uses: actions/setup-node@v4
               with:
-                  node-version: 18
+                  node-version: 20
                   registry-url: https://registry.npmjs.org/
             - uses: actions/download-artifact@v3
               with:
@@ -78,7 +81,7 @@ jobs:
               run: sleep 60s
 
             - name: Ok, now publish it
-              run: npm publish
+              run: npm publish --provenance
               env:
                   NODE_AUTH_TOKEN: ${{secrets.npm_token}}
 
@@ -87,13 +90,16 @@ jobs:
         needs: test
 
         runs-on: ubuntu-latest
+        permissions:
+            id-token: write
+
         if: ${{ github.event.release.prerelease }}
 
         steps:
             - uses: actions/checkout@v4
             - uses: actions/setup-node@v4
               with:
-                  node-version: 18
+                  node-version: 20
                   registry-url: https://registry.npmjs.org/
             - uses: actions/download-artifact@v3
               with:
@@ -104,7 +110,7 @@ jobs:
               run: npm version --no-git-tag-version ${GITHUB_REF/refs\/tags\//}
 
             - name: Beta Release
-              run: npm publish --tag beta
+              run: npm publish --tag beta --provenance
               env:
                   NODE_AUTH_TOKEN: ${{secrets.npm_token}}
 
diff --git a/.github/workflows/on-pull-request.yml b/.github/workflows/on-pull-request.yml
index ca4607cc..f67a2e5e 100644
--- a/.github/workflows/on-pull-request.yml
+++ b/.github/workflows/on-pull-request.yml
@@ -9,7 +9,7 @@ jobs:
         runs-on: ubuntu-latest
         strategy:
             matrix:
-                node-version: [18.x, 20.x]
+                node-version: [18.x, 20.x, 22.x]
 
         steps:
             - uses: actions/checkout@v4
@@ -33,7 +33,7 @@ jobs:
             - uses: actions/checkout@v4
             - uses: actions/setup-node@v4
               with:
-                  node-version: 18.x
+                  node-version: 20.x
                   cache: npm
             - name: Install
               run: npm ci