fix: typescript publishing ci npm version and permissions (#163)

Author: endernoke

.github/workflows/typescript-publish.yml

@@ -11,6 +11,7 @@ on:
     types: [published]
 
 permissions:
+  id-token: write  # Required for OIDC
   contents: read
 
 jobs:
@@ -21,10 +22,6 @@ jobs:
       (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/ts-v')) ||
       (github.event_name == 'release' && startsWith(github.event.release.tag_name, 'ts-v'))
 
-    permissions:
-      contents: read
-      id-token: write # Required for NPM provenance
-
     steps:
       - uses: actions/checkout@v4
 
@@ -34,6 +31,10 @@ jobs:
           registry-url: "https://registry.npmjs.org"
           scope: "@i7m"
 
+      - name: Update npm
+        # Ensure npm 11.5.1 or later for trusted publishing
+        run: npm install -g npm@latest
+
       - name: Install dependencies and build
         working-directory: ./instagram-ts
         run: npm ci && npm run build