workflow_dispatch needs to be its own key

.github/workflows/release.yaml

@@ -2,7 +2,9 @@ name: release
 
 on:
   push:
-        tags: ["v*", "workflow_dispatch"]
+    tags:
+      - "v*"
+  workflow_dispatch:
 
 permissions:
   id-token: write
@@ -33,7 +35,7 @@ jobs:
 
   release:
     name: Release
-        needs: [build]
+    needs: build
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -41,7 +43,7 @@ jobs:
       - name: Checkout Project
         uses: actions/checkout@v4
 
-            - name: Download Jecs Build
+      - name: Download Build
         uses: actions/download-artifact@v4
         with:
           name: build
@@ -54,12 +56,12 @@ jobs:
         uses: softprops/action-gh-release@v1
         with:
           name: Jecs ${{ github.ref_name }}
-                  files: |
-                      jecs.rbxm
+          tag_name: ${{ github.ref_name }}
+          files: jecs.rbxm
 
   publish-wally:
     name: Publish to Wally
-        needs: [release]
+    needs: release
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Project
@@ -76,8 +78,10 @@ jobs:
 
   publish-npm:
     name: Publish to NPM
-        needs: [release]
+    needs: release
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout Project
         uses: actions/checkout@v4
@@ -88,5 +92,10 @@ jobs:
           node-version: "24"
           registry-url: "https://registry.npmjs.org"
 
-            - run: npm install
-            - run: npm publish
+      - name: Install
+        run: npm install
+
+      - name: Publish
+        run: npm publish
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}