Add npm 11.5.1+ upgrade step for OIDC trusted publishing

[Copilot]

Node.js 22 ships with npm 10.x, but OIDC-based trusted publishing to npm requires npm 11.5.1+.

Changes

• Added npm upgrade step to .github/workflows/release-please.yml after actions/setup-node
• Runs npm install -g npm@^11.5.1 before package installation and publishing
• Step only executes when a release is created (same conditional as other publishing steps)

- name: Upgrade npm for trusted publishing
  if: ${{ steps.release.outputs.release_created }}
  run: npm install -g npm@^11.5.1

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Update CI workflow to install npm 11.5.1+ after setting up Node for trusted publishing</issue_title>
<issue_description>Currently, our CI workflow uses Node.js 22, which includes npm 10.x by default. However, trusted publishing to npm via OIDC requires npm 11.5.1 or later. To ensure successful OIDC-based publication to npm (trusted publishing), we should explicitly update npm to at least version 11.5.1 immediately after the actions/setup-node step in our workflow.

Proposed Change:

Add a CI step after actions/setup-node to run:

npm install -g npm@^11.5.1

This will ensure the correct npm version is available prior to publishing.</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Update CI workflow to install npm 11.5.1+ after setting up Node for trusted publishing #725

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.