diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index eb2617d..91f7817 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -105,6 +105,9 @@ jobs:
       - name: Build
         run: ${{ matrix.settings.build }}
         shell: bash
+      - name: Build oxrls CLI
+        run: cargo build --release --bin oxrls
+        shell: bash
       - name: Upload artifact
         uses: actions/upload-artifact@v7
         with:
@@ -180,6 +183,20 @@ jobs:
         run: ls -R ./npm
         shell: bash
       - name: Publish
+          run: |
+            npm config set provenance true
+            COMMIT_MSG=$(git log -1 --pretty=%B)
+            if echo "$COMMIT_MSG" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z]+\.[0-9]+)?$'; then
+              echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
+              if echo "$COMMIT_MSG" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+$'; then
+                npm publish --access public
+              else
+                npm publish --tag next --access public
+              fi
+            else
+              echo "Not a release, skipping publish"
+            fi
+
         run: |
           npm config set provenance true
           if git log -1 --pretty=%B | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+$";