Fix Trusted Publishing: move permissions to top level and update npm

Author: unlibra

.github/workflows/publish.yml

@@ -5,13 +5,14 @@ on:
     tags:
       - 'v*'
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
     environment: npm
-    permissions:
-      contents: read
-      id-token: write
     steps:
       - uses: actions/checkout@v4
 
@@ -20,6 +21,9 @@ jobs:
           node-version: '20'
           registry-url: 'https://registry.npmjs.org'
 
+      - name: Update npm
+        run: npm install -g npm@latest
+
       - name: Install dependencies
         run: npm ci
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "next-i18n-tiny",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "type": "module",
   "description": "Tiny, type-safe i18n library for Next.js with automatic type inference and zero dependencies",
   "keywords": [