From c64b5a93a6a0c66e31591d90fccfc32fff07c600 Mon Sep 17 00:00:00 2001
From: Sambhav Aggarwal <4591834+sambhav-aggarwal@users.noreply.github.com>
Date: Sun, 3 May 2026 15:03:35 +0530
Subject: [PATCH] Upgrade npm to latest in CI for OIDC trusted publishing

Node 22.x ships with npm 10.x; npm's auto-OIDC trusted publishing flow
requires npm >= 11.5. Add 'npm install -g npm@latest' before npm ci so
the runner has a recent enough npm to perform the OIDC token exchange.
---
 .github/workflows/publish.yml | 1 +
 package-lock.json             | 4 ++--
 package.json                  | 2 +-
 3 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 7c18d0e..f3ac811 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -17,6 +17,7 @@ jobs:
         with:
           node-version: 22.x
           cache: npm
+      - run: npm install -g npm@latest
       - run: npm ci
       - run: npm run build
       - run: npm publish --provenance
diff --git a/package-lock.json b/package-lock.json
index 378d5a5..26ee7b2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@ssntpl/otper-cli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ssntpl/otper-cli",
-      "version": "0.1.3",
+      "version": "0.1.4",
       "license": "MIT",
       "dependencies": {
         "@oclif/core": "^4.0.30",
diff --git a/package.json b/package.json
index befb475..09ba843 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@ssntpl/otper-cli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Command-line interface for Otper boards (https://otper.com).",
   "author": "SSNTPL <info@ssntpl.com>",
   "license": "MIT",