diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 94d6cdd..47e8604 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -18,14 +18,18 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - name: Use Node.js 22
+      - name: Use Node.js 24
+        # Node 24 bundles npm 11.x. OIDC Trusted Publishing needs npm >= 11.5.1,
+        # so if the bundled npm is recent enough we avoid a global upgrade step
+        # (which is fragile on GitHub runners). `Show npm version` below makes
+        # the actual bundled version visible in the run log.
         uses: actions/setup-node@v4
         with:
-          node-version: '22'
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org'
 
-      - name: Upgrade npm (OIDC requires >= 11.5.1)
-        run: npm install -g npm@latest
+      - name: Show npm version
+        run: npm --version
 
       - name: Install
         run: npm install
diff --git a/package.json b/package.json
index 3499e83..8ecbaf5 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@faceteer/cdk",
-	"version": "8.0.1-alpha.0",
+	"version": "8.0.1-alpha.1",
 	"description": "CDK 2.0 constructs and helpers that make composing a Lambda powered service easier.",
 	"main": "index.js",
 	"files": [