diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0eb163d..e40f482 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -322,6 +322,7 @@ jobs:
         shell: bash
     permissions:
       deployments: write
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v3
@@ -338,7 +339,7 @@ jobs:
       - name: Publish
         env:
           PUBLISH_TOKEN: ${{ secrets.PUBLISH_TOKEN }}
-        run: npm publish
+        run: npm publish --provenance
 
   post-release-integration:
     needs: [ release, release-integration ]
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index f93e26d..848ff9f 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "10.0.3"
+  ".": "10.0.4"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9fa88bf..67ae49f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## [10.0.4](https://github.com/npm/ssri/compare/v10.0.3...v10.0.4) (2023-04-26)
+
+### Dependencies
+
+* [`152e2bc`](https://github.com/npm/ssri/commit/152e2bce4362d9a2376fcc90329e184e2bb7631a) [#78](https://github.com/npm/ssri/pull/78) bump minipass from 4.2.7 to 5.0.0 (#78)
+
 ## [10.0.3](https://github.com/npm/ssri/compare/v10.0.2...v10.0.3) (2023-04-11)
 
 ### Bug Fixes
diff --git a/lib/index.js b/lib/index.js
index 7db8dcf..d0ff9df 100644
--- a/lib/index.js
+++ b/lib/index.js
@@ -1,7 +1,7 @@
 'use strict'
 
 const crypto = require('crypto')
-const MiniPass = require('minipass')
+const { Minipass } = require('minipass')
 
 const SPEC_ALGORITHMS = ['sha512', 'sha384', 'sha256']
 const DEFAULT_ALGORITHMS = ['sha512']
@@ -15,7 +15,7 @@ const VCHAR_REGEX = /^[\x21-\x7E]+$/
 
 const getOptString = options => options?.length ? `?${options.join('?')}` : ''
 
-class IntegrityStream extends MiniPass {
+class IntegrityStream extends Minipass {
   #emittedIntegrity
   #emittedSize
   #emittedVerified
diff --git a/package.json b/package.json
index b41400c..815c7f3 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "ssri",
-  "version": "10.0.3",
+  "version": "10.0.4",
   "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
   "main": "lib/index.js",
   "files": [
@@ -47,11 +47,11 @@
   "author": "GitHub Inc.",
   "license": "ISC",
   "dependencies": {
-    "minipass": "^4.0.0"
+    "minipass": "^5.0.0"
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.13.0",
+    "@npmcli/template-oss": "4.14.1",
     "tap": "^16.0.1"
   },
   "engines": {
@@ -59,7 +59,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.13.0",
+    "version": "4.14.1",
     "publish": "true"
   }
 }