From 83cc146d1498ac13871f0169991cb6dacfad89cf Mon Sep 17 00:00:00 2001
From: oller <1219831+oller@users.noreply.github.com>
Date: Sat, 31 Oct 2026 00:15:36 +0000
Subject: [PATCH 1/2] fix(ci): drop registry-url so OIDC publish works

---
 .github/workflows/publish.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 8da19a0..d8c4b69 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -29,7 +29,9 @@ jobs:
         with:
           node-version: 22
           cache: pnpm
-          registry-url: "https://registry.npmjs.org"
+
+      - name: Ensure npm supports OIDC trusted publishing
+        run: npm install -g npm@latest
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile

From ace009d5865e287764ba9cdbe27492e925c49015 Mon Sep 17 00:00:00 2001
From: oller <1219831+oller@users.noreply.github.com>
Date: Sat, 31 Oct 2026 00:19:33 +0000
Subject: [PATCH 2/2] fix(ci): use Node 24 for OIDC (npm 11+) instead of
 npm@latest
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Node 22 ships npm 10.9.x; trusted publishing needs npm ≥11.5.1.
Match slidev-theme-nord: Node 24 with bundled npm 11.
---
 .github/workflows/publish.yml | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index d8c4b69..bfedc05 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -27,11 +27,9 @@ jobs:
 
       - uses: actions/setup-node@v7
         with:
-          node-version: 22
+          node-version: 24
           cache: pnpm
-
-      - name: Ensure npm supports OIDC trusted publishing
-        run: npm install -g npm@latest
+          registry-url: "https://registry.npmjs.org"
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile