diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e8916ec7d..321248366 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -46,7 +46,17 @@ jobs:
           GH_TOKEN: ${{ secrets.SWAGGER_BOT_GITHUB_TOKEN }}
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Publish monorepo npm packages
-        run: npx lerna publish from-package --no-private --yes --concurrency 1
+        run: |
+          # `from-package` skips versions already on npm, so retrying only republishes failed packages
+          for attempt in 1 2 3 4 5; do
+            npx lerna publish from-package --no-private --yes && exit 0
+            echo "Publish attempt $attempt failed"
+            sleep 30
+          done
+          # Last resort: Sigstore keeps rejecting the attestation, publish remaining packages without provenance
+          echo "::warning::Publishing remaining packages without provenance"
+          sed -i 's/"provenance": true/"provenance": false/' packages/*/package.json
+          npx lerna publish from-package --no-private --yes
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}