diff --git a/.github/workflows/PublishNpm.yml b/.github/workflows/PublishNpm.yml
index 4dccf181..b6c0156b 100644
--- a/.github/workflows/PublishNpm.yml
+++ b/.github/workflows/PublishNpm.yml
@@ -6,6 +6,10 @@ on:
       - "pluggable-widgets-tools-v*"
       - "generator-widget-v*"
 
+permissions:
+  id-token: write  # Required for OIDC
+  contents: read
+
 jobs:
   discover:
     name: Discover packages to publish
@@ -47,17 +51,17 @@ jobs:
       - name: Check-out code
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
+      - name: Setup pnpm
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda #v4.1.0
+        with:
+          version: 10
+
       - name: Setup node
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: ".nvmrc"
           cache: 'pnpm'
 
-      - name: Setup pnpm
-        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda #v4.1.0
-        with:
-          version: 10
-
       - name: Install dependencies
         working-directory: ./packages/${{ matrix.release.package }}
         run: pnpm install
diff --git a/packages/pluggable-widgets-tools/CHANGELOG.md b/packages/pluggable-widgets-tools/CHANGELOG.md
index c1ab6de4..4cc866a8 100644
--- a/packages/pluggable-widgets-tools/CHANGELOG.md
+++ b/packages/pluggable-widgets-tools/CHANGELOG.md
@@ -6,8 +6,6 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ## [Unreleased]
 
-## [11.3.0] - 2025-11-11
-
 ### Changed
 
 -   We added @d11/react-native-fast-image as an external native dependency in rollup config.