diff --git a/.github/workflows/typescript-packages-publish.yml b/.github/workflows/typescript-packages-publish.yml
index 8b77f154a85..06fc69d2212 100644
--- a/.github/workflows/typescript-packages-publish.yml
+++ b/.github/workflows/typescript-packages-publish.yml
@@ -60,6 +60,9 @@ jobs:
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          # `changeset publish` builds its own publish flags and never passes
+          # --provenance, so request it through npm config instead.
+          NPM_CONFIG_PROVENANCE: true
       # - name: Release docs
       # Run pnpm run docs in js/packages/phoenix-client
       # Deploy the static files in js/packages/phoenix-client/docs to github pages
diff --git a/js/.changeset/config.json b/js/.changeset/config.json
index a6bd0116f94..1dbe1877c3a 100644
--- a/js/.changeset/config.json
+++ b/js/.changeset/config.json
@@ -4,7 +4,7 @@
   "commit": false,
   "fixed": [],
   "linked": [],
-  "access": "restricted",
+  "access": "public",
   "baseBranch": "main",
   "updateInternalDependencies": "patch",
   "ignore": ["phoenix-experiment-runner", "demo-document-relevancy-experiment"],
diff --git a/js/package.json b/js/package.json
index 0a68f4dfbbd..6573804f528 100644
--- a/js/package.json
+++ b/js/package.json
@@ -21,7 +21,7 @@
   },
   "scripts": {
     "build": "pnpm run -r build",
-    "ci:publish": "pnpm --filter './packages/*' run -r build && pnpm publish -r --access public --provenance",
+    "ci:publish": "pnpm --filter './packages/*' run -r build && pnpm changeset publish",
     "ci:version": "pnpm changeset version",
     "clean": "pnpm run clean:node_modules",
     "clean:node_modules": "rimraf --glob '**/node_modules/**'",