diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fc87ed3..af95aee 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,6 +18,10 @@ jobs:
         deno: [v1.x, canary]
         os: [macOS-latest, windows-latest, ubuntu-latest]
 
+    permissions:
+      contents: read
+      id-token: write
+
     steps:
       - name: Setup repo
         uses: actions/checkout@v4
diff --git a/README.md b/README.md
index 03fdd03..4f2f16b 100644
--- a/README.md
+++ b/README.md
@@ -19,7 +19,7 @@ import * as esbuild from "npm:esbuild@0.20.2";
 // permitted, such as Deno Deploy, or when running without `--allow-run`.
 // import * as esbuild from "npm:esbuild-wasm@0.20";
 
-import { denoPlugins } from "jsr:@luca/esbuild-deno-loader@^0.10.1";
+import { denoPlugins } from "jsr:@luca/esbuild-deno-loader@^0.10.2";
 
 const result = await esbuild.build({
   plugins: [...denoPlugins()],
diff --git a/deno.json b/deno.json
index 907b743..60bf630 100644
--- a/deno.json
+++ b/deno.json
@@ -1,6 +1,6 @@
 {
   "name": "@luca/esbuild-deno-loader",
-  "version": "0.10.1",
+  "version": "0.10.2",
   "exports": "./mod.ts",
   "imports": {
     "@std/assert": "jsr:@std/assert@0.213",