diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 3ab91028d..c5376da2e 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -78,14 +78,10 @@ jobs:
           npm pkg set version=$NEW_VERSION --no-git-tag-version
       - uses: actions/setup-node@v6
         with:
-          node-version: '23.x'
-          # registry-url is required for OIDC trusted publishing. Avoid `npm install -g npm@latest`
-          # on hosted runners — it can leave npm broken (e.g. MODULE_NOT_FOUND / promise-retry).
+          # Node 24.x bundles npm >= 11.5.1, which supports OIDC trusted publishing.
+          # registry-url is required for OIDC.
+          node-version: '24.x'
           registry-url: 'https://registry.npmjs.org'
-      - name: Upgrade npm for OIDC support
-        run: |
-          npm install -g npm@latest
-          echo "npm version: $(npm --version)"
       - name: Enable Corepack
         run: corepack enable
       - name: Install dependencies
diff --git a/.github/workflows/release-publisher.yml b/.github/workflows/release-publisher.yml
index 38bf15752..3821d685a 100644
--- a/.github/workflows/release-publisher.yml
+++ b/.github/workflows/release-publisher.yml
@@ -102,15 +102,11 @@ jobs:
         if: steps.verify-merge.outputs.is_release == 'true'
         uses: actions/setup-node@v6
         with:
-          node-version: '23.x'
+          # Node 24.x bundles npm >= 11.5.1, which supports OIDC trusted publishing.
+          # registry-url is required for OIDC.
+          node-version: '24.x'
           registry-url: 'https://registry.npmjs.org'
 
-      - name: Upgrade npm for OIDC support
-        if: steps.verify-merge.outputs.is_release == 'true'
-        run: |
-          npm install -g npm@latest
-          echo "npm version: $(npm --version)"
-
       - name: Enable Corepack
         if: steps.verify-merge.outputs.is_release == 'true'
         run: corepack enable