From 9dce59534f3cf8c6ed0827d793369019d4cae04d Mon Sep 17 00:00:00 2001 From: Tyler Oakleaf Date: Wed, 15 Jul 2026 17:36:50 -0400 Subject: [PATCH] ci: pin npm for Node 20 releases --- .github/workflows/release.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e7021a49..4c9eb9f1 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -40,9 +40,10 @@ jobs: - name: Install dependencies run: pnpm install - # Ensure npm CLI supports OIDC trusted publishing (requires 11.5.1+) + # npm 11 supports OIDC trusted publishing and Node 20. Pin it so a future + # npm major cannot raise its Node requirement and break the release job. - name: Update npm for OIDC support - run: npm install -g npm@latest + run: npm install -g npm@11.18.0 - name: Configure git run: |