fix publish script to support oidc

.github/workflows/build.yml

@@ -20,8 +20,6 @@ jobs:
 
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 9
 
       - name: Set up node
         uses: actions/setup-node@v3

.github/workflows/lint.yml

@@ -20,8 +20,6 @@ jobs:
 
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 9
 
       - name: Set up node
         uses: actions/setup-node@v3

.github/workflows/publish.yml

@@ -37,8 +37,6 @@ jobs:
 
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 9
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
@@ -85,4 +83,9 @@ jobs:
           echo "Publish tag is $PUBLISH_TAG"
 
       - name: Publish package
-        run: pnpm publish --access public --no-git-checks --tag $PUBLISH_TAG --provenance
+        run: |
+          # Configure pnpm to use local npm v11.6.4 for OIDC support
+          NPM_BIN="$PWD/node_modules/.bin/npm"
+          pnpm config set npm-path "$NPM_BIN"
+          # Use pnpm publish with --provenance for OIDC authentication
+          pnpm publish --access public --no-git-checks --tag $PUBLISH_TAG --provenance

.github/workflows/test-cli.yml

@@ -18,8 +18,6 @@ jobs:
 
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 9
 
       - name: Setup Node.js
         uses: actions/setup-node@v4

.github/workflows/test.yml

@@ -19,8 +19,6 @@ jobs:
 
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 9
 
       - name: Set up node
         uses: actions/setup-node@v3

package.json

@@ -59,6 +59,7 @@
   },
   "devDependencies": {
     "@eslint/js": "^9.0.0",
+    "npm": "^11.6.4",
     "@jest/globals": "^30.0.4",
     "@types/fs-extra": "^11.0.2",
     "@types/jest": "^29.5.5",
@@ -78,5 +79,6 @@
   },
   "engines": {
     "node": ">=16.0.0"
-  }
+  },
+  "packageManager": "pnpm@10.20.0"
 }