Use latest npm versino for publish step

Author: ewgenius

.github/workflows/npm-publish.yml

@@ -65,4 +65,6 @@ jobs:
       - run: npm ci
       - run: node scripts/update-version.js # ensure the version in version.ts is updated
       - run: npm run build
-      - run: npm publish # no token needed, using OIDC instead
+      - run: npm install -g npm@latest  # Upgrade to npm >= 11.5.1 for OIDC trusted publishing
+      - run: npm --version  # Verify npm version
+      - run: npm publish --access public  # OIDC authentication happens automatically

.github/workflows/test.yml

@@ -17,6 +17,21 @@ permissions:
   contents: read
 
 jobs:
+  test-npm:
+    environment: npm
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 20
+          registry-url: https://registry.npmjs.org/
+          cache: 'npm'
+      - run: npm ci
+      - run: npm --version  # Verify npm version
+      - run: npm install -g npm@latest  # Upgrade to npm >= 11.5.1 for OIDC trusted publishing
+      - run: npm --version  # Verify npm version
+
   browser-tests:
     name: Browser Tests (Node ${{ matrix.node }})
     runs-on: ubuntu-latest