diff --git a/.github/workflows/node-release.yml b/.github/workflows/node-release.yml
index 82fda97..35f1a49 100644
--- a/.github/workflows/node-release.yml
+++ b/.github/workflows/node-release.yml
@@ -5,7 +5,7 @@ on:
     secrets:
       NPM_TOKEN:
         description: 'npm token'
-        required: true
+        required: false
       GIT_TOKEN:
         description: 'github personal token'
         required: true
diff --git a/README.md b/README.md
index 1a6fe92..321dde7 100644
--- a/README.md
+++ b/README.md
@@ -164,6 +164,13 @@ on:
   # 手动发布
   # workflow_dispatch: {}
 
+permissions:
+  contents: write
+  deployments: write
+  issues: write
+  pull-requests: write
+  id-token: write
+
 jobs:
   release:
     name: NPM
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..5db72dd
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,6 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ]
+}
diff --git a/scripts/npm-release/package.json b/scripts/npm-release/package.json
index 2f2e5eb..3132bc5 100644
--- a/scripts/npm-release/package.json
+++ b/scripts/npm-release/package.json
@@ -3,7 +3,7 @@
   "dependencies": {
     "@actions/core": "^1.10.0",
     "@actions/exec": "^1.1.1",
-    "@semantic-release/npm": "13.0.0-alpha.5",
+    "@semantic-release/npm": "^13.1.5",
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/exec": "^7.1.0",
     "@semantic-release/git": "^10.0.1",
@@ -11,7 +11,7 @@
     "@semantic-release/release-notes-generator": "^14.0.3",
     "@semantic-release/github": "^11.0.3",
     "conventional-changelog-conventionalcommits": "^5.0.0",
-    "semantic-release": "25.0.0-alpha.4",
+    "semantic-release": "^25.0.3",
     "undici": "^5.14.0"
   },
   "devDependencies": {