diff --git a/.github/workflows/rake.yml b/.github/workflows/rake.yml
index a84c5f9..ef2b4f9 100644
--- a/.github/workflows/rake.yml
+++ b/.github/workflows/rake.yml
@@ -61,4 +61,4 @@ jobs:
         esac
         ruby -Ilib -rlasem -e 'abort "Lasem native extension unavailable" unless Lasem.native_available?'
     secrets:
-      pat_token: ${{ secrets.METANORMA_CI_PAT_TOKEN }}
+      pat_token: ${{ secrets.PLURIMATH_CI_PAT_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7bf4adc..9472d5f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,8 +7,8 @@ on:
     inputs:
       next_version:
         description: |
-          Next release version. Possible values: x.y.z, major, minor, patch (or pre|rc|etc).
-          Also, you can pass 'skip' to skip 'git tag' and do 'gem push' for the current version
+          Next release version. Possible values: x.y.z, major, minor, patch or pre|rc|etc.
+          Pass 'skip' to skip the version bump and release the current version.
         required: true
         default: 'skip'
   repository_dispatch:
@@ -16,9 +16,12 @@ on:
 
 jobs:
   release:
+    permissions:
+      contents: write
+      id-token: write
     uses: metanorma/ci/.github/workflows/rubygems-release.yml@main
     with:
       next_version: ${{ github.event.inputs.next_version }}
     secrets:
-      rubygems-api-key: ${{ secrets.METANORMA_CI_RUBYGEMS_API_KEY }}
-      pat_token: ${{ secrets.METANORMA_CI_PAT_TOKEN }}
+      rubygems-api-key: ${{ secrets.PLURIMATH_CI_RUBYGEMS_API_KEY }}
+      pat_token: ${{ secrets.PLURIMATH_CI_PAT_TOKEN }}