diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml
index fef99c494..3ebd2f282 100644
--- a/.github/workflows/publish-npm.yml
+++ b/.github/workflows/publish-npm.yml
@@ -50,18 +50,23 @@ jobs:
       !failure() && !cancelled()
       && (github.event_name == 'workflow_dispatch' || needs.detect.outputs.changed == 'true')
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      actions: read
+      pull-requests: read
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
           ref: 'v3-alpha'
-          ssh-key: ${{ secrets.DEPLOY_KEY }}
+          token: ${{ secrets.WAILS_REPO_TOKEN || github.token }}
 
       - name: Configure git
         run: |
-          git config --local user.email "github-actions@github.com"
-          git config --local user.name "GitHub Actions"
+          git config --global user.email "github-actions@github.com"
+          git config --global user.name "GitHub Actions"
+          git config --global url."https://x-access-token:${{ secrets.WAILS_REPO_TOKEN || github.token }}@github.com/".insteadOf "https://github.com/"
 
       - name: Install Task
         uses: arduino/setup-task@v2
diff --git a/v3/internal/runtime/desktop/@wailsio/runtime/package-lock.json b/v3/internal/runtime/desktop/@wailsio/runtime/package-lock.json
index 695e85ed0..ded707d7d 100644
--- a/v3/internal/runtime/desktop/@wailsio/runtime/package-lock.json
+++ b/v3/internal/runtime/desktop/@wailsio/runtime/package-lock.json
@@ -6,7 +6,7 @@
   "packages": {
     "": {
       "name": "@wailsio/runtime",
-      "version": "3.0.0-alpha.69",
+      "version": "3.0.0-alpha.70",
       "license": "MIT",
       "devDependencies": {
         "happy-dom": "^17.1.1",