diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
index 6e8b9a6..8a695ce 100644
--- a/.github/workflows/cd.yaml
+++ b/.github/workflows/cd.yaml
@@ -75,6 +75,9 @@ jobs:
           git push
           git push --tags
 
+      - name: Upgrade npm for OIDC Trusted Publishing
+        run: npm install -g npm@11.5.2
+
         # Build happens on "prepare" (before publish)
       - name: Publish to npm
         run: npm publish --access public