diff --git a/release/npm-trusted-publishing.json b/release/npm-trusted-publishing.json
index ebf57c42..795a9e8c 100644
--- a/release/npm-trusted-publishing.json
+++ b/release/npm-trusted-publishing.json
@@ -11,6 +11,7 @@
   },
   "packages": [
     "@prometheus-ags/entity-graph-core",
+    "@prometheus-ags/entity-graph-react",
     "@prometheus-ags/prometheus-entity-management",
     "@prometheus-ags/entity-graph-sdl",
     "@prometheus-ags/entity-graph-sync",
diff --git a/tests/release/npm-trusted-publishing.test.mjs b/tests/release/npm-trusted-publishing.test.mjs
index c1a0a83a..0c74d45f 100644
--- a/tests/release/npm-trusted-publishing.test.mjs
+++ b/tests/release/npm-trusted-publishing.test.mjs
@@ -14,9 +14,9 @@ import {
   validateAuthorityManifest,
 } from "../../scripts/npm-trust.mjs";
 
-test("authority manifest covers exactly the twelve public npm packages", async () => {
+test("authority manifest covers exactly the thirteen public npm packages", async () => {
   const manifest = validateAuthorityManifest(await loadAuthorityManifest());
-  assert.equal(manifest.packages.length, 12);
+  assert.equal(manifest.packages.length, 13);
   assert.deepEqual(new Set(manifest.packages), new Set(PUBLIC_PACKAGES.map(({name}) => name)));
   assert.equal(manifest.permissions.directPublish, true);
   assert.equal(manifest.permissions.stagePublish, true);