diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 10d9897..23ac403 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -5,6 +5,7 @@ on:
       - "v*.*.*"
 
 permissions:
+  id-token: write  # Required for OIDC
   contents: read
 
 jobs:
@@ -26,5 +27,3 @@ jobs:
           npm run build
 
       - run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 39fa8ed..28d28bd 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.0.39"
+  ".": "0.0.40"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3fa7795..204a8a0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.0.40](https://github.com/cloudquery/plugin-pb-javascript/compare/v0.0.39...v0.0.40) (2026-02-26)
+
+
+### Bug Fixes
+
+* Bump tar from 7.5.2 to 7.5.9 ([ba7b9b5](https://github.com/cloudquery/plugin-pb-javascript/commit/ba7b9b5abfdaf42dede86a6782f350f5e8bb9662))
+
 ## [0.0.39](https://github.com/cloudquery/plugin-pb-javascript/compare/v0.0.38...v0.0.39) (2026-01-02)
 
 
diff --git a/package-lock.json b/package-lock.json
index 56761b9..ccc0460 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@cloudquery/plugin-pb-javascript",
-  "version": "0.0.39",
+  "version": "0.0.40",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@cloudquery/plugin-pb-javascript",
-      "version": "0.0.39",
+      "version": "0.0.40",
       "license": "MPL-2.0",
       "dependencies": {
         "google-protobuf": "^4.0.0"
@@ -568,9 +568,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.2",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.2.tgz",
-      "integrity": "sha512-7NyxrTE4Anh8km8iEy7o0QYPs+0JKBTj5ZaqHg6B39erLg0qYXN3BijtShwbsNSvQ+LN75+KV+C4QR/f6Gwnpg==",
+      "version": "7.5.9",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.9.tgz",
+      "integrity": "sha512-BTLcK0xsDh2+PUe9F6c2TlRp4zOOBMTkoQHQIWSIzI0R7KG46uEwq4OPk2W7bZcprBMsuaeFsqwYr7pjh6CuHg==",
       "dev": true,
       "license": "BlueOak-1.0.0",
       "dependencies": {
diff --git a/package.json b/package.json
index fd50b3e..3f90b1f 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudquery/plugin-pb-javascript",
-  "version": "0.0.39",
+  "version": "0.0.40",
   "files": [
     "dist"
   ],