From a01adbe26c4aef32e2cc92026bf3724939baf9d0 Mon Sep 17 00:00:00 2001 From: CloakHQ Date: Tue, 7 Apr 2026 07:31:08 +0200 Subject: [PATCH] ci: restore npm upgrade for OIDC publishing (pin to npm@11) Node 22 ships npm v10 which lacks OIDC support. The upgrade step was removed in 02359f6 but is required for provenance-based publishing. Pin to npm@11 instead of @latest to avoid future breakage. --- .github/workflows/publish.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 2f19121..9d0126d 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -85,6 +85,8 @@ jobs: with: node-version: 22 registry-url: 'https://registry.npmjs.org' + - name: Upgrade npm for OIDC support + run: npm install -g npm@11 - name: Build run: cd js && npm ci && npm run build - name: Publish to npm