From 5c7d5fd7de8d1f0afeaf3900ceec3f32dc6a1575 Mon Sep 17 00:00:00 2001
From: init4samwise <samwise@init4.technology>
Date: Tue, 17 Feb 2026 14:10:16 +0000
Subject: [PATCH] ci: install npm 11+ for trusted publishing

Trusted publishing requires npm CLI 11.5.1+, but Node 22.x
bundles npm 10.x. This adds a step to install the latest npm
before publishing.

Fixes ENG-1912
---
 .github/workflows/release.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 91ec284..f0ca05b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -32,6 +32,9 @@ jobs:
       - run: pnpm install --frozen-lockfile
       - run: pnpm build
 
+      - name: Install npm 11+ for trusted publishing
+        run: npm install -g npm@latest
+
       - name: Create Release (if needed)
         # Uses OIDC trusted publishing - no NPM_TOKEN needed
         # See: https://docs.npmjs.com/trusted-publishers