diff --git a/.github/workflows/publish-mcp-server.yml b/.github/workflows/publish-mcp-server.yml
index 73732483..10f37692 100644
--- a/.github/workflows/publish-mcp-server.yml
+++ b/.github/workflows/publish-mcp-server.yml
@@ -198,6 +198,17 @@ jobs:
         if: ${{ steps.changelog.outputs.skipped == 'false' && steps.release.outputs.id != '' }}
         run: |
           cd packages/mcp
+          rm -rf node_modules
+
+          # `npm shrinkwrap` doesn't support monorepos so we
+          # copy `packages/mcp` to a tmp dir for it to be a single npm project
+          mkdir ${{ runner.temp }}/mcp-shrinkwrap
+          # Use -L flag to dereference symlinks (e.g., README.md -> ../../README.md)
+          cp -rL . ${{ runner.temp }}/mcp-shrinkwrap
+          cd ${{ runner.temp }}/mcp-shrinkwrap
+          npm install
+          npm shrinkwrap
+
           echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > ~/.npmrc
 
           # Determine npm dist-tag
diff --git a/packages/mcp/.sfdevrc b/packages/mcp/.sfdevrc
index f936a71b..fa5c0f77 100644
--- a/packages/mcp/.sfdevrc
+++ b/packages/mcp/.sfdevrc
@@ -1,4 +1,7 @@
 {
+  "scripts": {
+    "prepack": "echo 'no prepack script'"
+  },
   "devDepOverrides": [
     "eslint-config-salesforce-license",
     "@types/node"
diff --git a/packages/mcp/CHANGELOG.md b/packages/mcp/CHANGELOG.md
index 2c1545f9..1c6aa49f 100644
--- a/packages/mcp/CHANGELOG.md
+++ b/packages/mcp/CHANGELOG.md
@@ -1,3 +1,26 @@
+## [0.23.5-dev.1](https://github.com/salesforcecli/mcp/compare/0.23.5-dev.0...0.23.5-dev.1) (2025-10-24)
+
+
+
+## [0.23.5-dev.0](https://github.com/salesforcecli/mcp/compare/0.23.4...0.23.5-dev.0) (2025-10-24)
+
+
+### Bug Fixes
+
+* listen on `SIGTERM` for telemetry ([#296](https://github.com/salesforcecli/mcp/issues/296)) ([2115e37](https://github.com/salesforcecli/mcp/commit/2115e3733f7bb8cbfc997635bbe7b807333d931b))
+* **telemetry:** always set `isError` for tool events ([#308](https://github.com/salesforcecli/mcp/issues/308)) ([a7f9568](https://github.com/salesforcecli/mcp/commit/a7f95689d650d30900b920b5ee609b3af488b0e1))
+
+
+
+## [0.19.2-dev.1](https://github.com/salesforcecli/mcp/compare/0.19.1...0.19.2-dev.1) (2025-09-05)
+
+
+### Bug Fixes
+
+* add shrinkwrap lockfile ([400fe7a](https://github.com/salesforcecli/mcp/commit/400fe7a1852956aa8d25f5f299334f67acb36ea6))
+
+
+
 ## [0.23.4](https://github.com/salesforcecli/mcp/compare/0.23.3...0.23.4) (2025-10-06)
 
 
@@ -108,7 +131,16 @@
 
 
 
-## [0.19.2](https://github.com/salesforcecli/mcp/compare/0.19.1...0.19.2) (2025-09-16)
+## [0.19.2](https://github.com/salesforcecli/mcp/compare/0.19.2-dev.1...0.19.2) (2025-09-16)
+
+
+
+## [0.19.2-dev.1](https://github.com/salesforcecli/mcp/compare/0.19.1...0.19.2-dev.1) (2025-09-05)
+
+
+### Bug Fixes
+
+* add shrinkwrap lockfile ([400fe7a](https://github.com/salesforcecli/mcp/commit/400fe7a1852956aa8d25f5f299334f67acb36ea6))
 
 
 
diff --git a/packages/mcp/package.json b/packages/mcp/package.json
index e9ebceb0..c4cdaf0b 100644
--- a/packages/mcp/package.json
+++ b/packages/mcp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/mcp",
-  "version": "0.23.4",
+  "version": "0.23.5-dev.1",
   "description": "MCP Server for interacting with Salesforce instances",
   "bin": {
     "sf-mcp-server": "bin/run.js"
@@ -31,6 +31,7 @@
     "!lib/**/*.map",
     "messages",
     "LICENSE.txt",
+    "npm-shrinkwrap.json",
     "package.json"
   ],
   "engines": {