diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index c216ed9..20d7ab9 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -18,6 +18,9 @@ jobs:
           node-version: 22
           registry-url: https://registry.npmjs.org
 
+      - name: Update npm for trusted publishing (OIDC)
+        run: npm install -g npm@latest
+
       - run: npm install
       - run: npm run build
       - run: npm test