diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 494b5e662d6c..efa73dbcf814 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -19,16 +19,16 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Install pnpm
-        uses: pnpm/action-setup@v2
-
-      - name: Set node version to 18
+      - name: Set node version to 20
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 20
           registry-url: https://registry.npmjs.org/
           cache: pnpm
 
+      - name: Install pnpm
+        uses: pnpm/action-setup@v3
+
       - name: Install
         run: pnpm install --frozen-lockfile --prefer-offline
         env:
diff --git a/.npmrc b/.npmrc
index 0d2900e898ad..80bce8dff8bd 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1,5 +1,6 @@
 ignore-workspace-root-check=true
 strict-peer-dependencies=false
+provenance=true
 shell-emulator=true
 registry=https://registry.npmjs.org/
 VITE_NODE_DEPS_MODULE_DIRECTORIES=/node_modules/,/packages/
diff --git a/scripts/publish-ci.ts b/scripts/publish-ci.ts
index 456e91493aa5..fe6412a39083 100644
--- a/scripts/publish-ci.ts
+++ b/scripts/publish-ci.ts
@@ -27,9 +27,9 @@ const releaseTag = version.includes('beta')
     ? 'alpha'
     : undefined
 
-console.log('Publishing version', version, 'with tag', releaseTag)
+console.log('Publishing version', version, 'with tag', releaseTag || 'latest')
 
 if (releaseTag)
-  await $`pnpm -r publish --provenance --access public --no-git-checks --tag ${releaseTag}`
+  await $`pnpm -r publish --access public --no-git-checks --tag ${releaseTag}`
 else
-  await $`pnpm -r publish --provenance --access public --no-git-checks`
+  await $`pnpm -r publish --access public --no-git-checks`