fix: npm oidc correctly

Author: Khurdhula-Harshavardhan

.github/workflows/publish.yml

@@ -1,4 +1,5 @@
 name: Deploy JigsawStack Package to NPM and JSR when a Release is Created
+
 on:
   release:
     types: [created]
@@ -15,12 +16,22 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: "20.x"
+          node-version: "22.x"
           registry-url: "https://registry.npmjs.org"
+
+      # Ensure npm is new enough for Trusted Publishing (>= 11.5.1)
+      - name: Update npm
+        run: npm install -g npm@latest
+
+      - name: Enable corepack (yarn)
+        run: corepack enable
+
+      - name: Install deps
+        run: yarn install --frozen-lockfile
+
       - name: Build package
-        run: |
-          yarn
-          yarn build
+        run: yarn build
+
       - name: Publish to NPM
         run: npm publish --provenance --access public
 
@@ -34,7 +45,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: "20.x"
+          node-version: "22.x"
       - name: Build package
         run: |
           yarn