From b4dadd4b766b44e07112d12d78ddaf55b6bbe3f4 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Sun, 8 Feb 2026 21:31:55 +0000
Subject: [PATCH] fix: upgrade npm before publish for OIDC trusted publisher
 support

npm trusted publishing requires npm CLI >= 11.5.1, but Node 20 ships
with npm 10.x which doesn't support the OIDC token exchange. Adding
an explicit npm upgrade step before publishing.

https://claude.ai/code/session_01StxzJra1LPf3yJWvS94ZtA
---
 .github/workflows/publish.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 612ecd7..a163f85 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -58,5 +58,7 @@ jobs:
         with:
           node-version: 20
           registry-url: "https://registry.npmjs.org"
+      - name: Update npm to latest (trusted publishing requires npm >= 11.5.1)
+        run: npm install -g npm@latest
       - name: Publish to npm
         run: npm publish --provenance --access public
\ No newline at end of file