From 7a20a8edf892fee21ebafa55420c7a4d36474218 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Mon, 5 Oct 2026 14:23:00 +0000 Subject: [PATCH] Cherry-pick: ci: pin npm to 11.5.1 in the publish workflow Cherry-picked from #19 (merged to release/2.3.x) Original commit: 616d7a180cf51e0ff1b2267f10e74e165b07a037 Co-Authored-By: frontegg-david <69419539+frontegg-david@users.noreply.github.com> --- .github/workflows/publish-release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml index ea32884..d7e724c 100644 --- a/.github/workflows/publish-release.yml +++ b/.github/workflows/publish-release.yml @@ -74,7 +74,7 @@ jobs: registry-url: "https://registry.npmjs.org/" - name: Update npm CLI for trusted publishing - run: npm install -g npm@latest + run: npm install -g npm@11.5.1 # Pinned: the first npm with OIDC publishing; npm@latest can require a newer Node than .nvmrc - name: Compute version id: version