From ec86140c52d13d6e2175158807cf830e925b51d3 Mon Sep 17 00:00:00 2001
From: bntvllnt <32437578+bntvllnt@users.noreply.github.com>
Date: Sun, 26 Apr 2026 21:48:01 +0200
Subject: [PATCH] =?UTF-8?q?fix(ci):=20drop=20upgrade=20step=20=E2=80=94=20?=
 =?UTF-8?q?Node=2022=20already=20supports=20OIDC=20provenance?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The install-g-latest step fails on the current runner (Node 22.22.2)
with MODULE_NOT_FOUND: promise-retry. The upgrade was originally added
to get OIDC provenance support, but Node 22 bundles a version that
already supports it — the step is now both unnecessary and broken.
---
 .github/workflows/publish.yml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 30cb524..218c7d8 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -77,9 +77,6 @@ jobs:
 
       - run: pnpm build
 
-      - name: Upgrade npm for OIDC support
-        run: npm install -g npm@latest
-
       - name: Publish canary
         run: |
           sed -i '/_authToken/d' "$NPM_CONFIG_USERCONFIG"
@@ -172,9 +169,6 @@ jobs:
           git tag -a "v${{ steps.version.outputs.version }}" -m "v${{ steps.version.outputs.version }}"
           git push origin main --follow-tags
 
-      - name: Upgrade npm for OIDC support
-        run: npm install -g npm@latest
-
       - name: Publish to npm
         run: |
           sed -i '/_authToken/d' "$NPM_CONFIG_USERCONFIG"