From 952bce1cec53804419522a3d15e155acfad0948a Mon Sep 17 00:00:00 2001
From: Anjey Tsibylskij <130153594+atldays@users.noreply.github.com>
Date: Fri, 13 Mar 2026 15:38:30 +0200
Subject: [PATCH] ci(workflow): add permissions and update npm in release
 workflow

---
 .github/workflows/release.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 18a42e4..adcfd3f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,6 +35,9 @@ jobs:
     name: Release & Publish
     runs-on: ubuntu-latest
     needs: ci
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -48,6 +51,11 @@ jobs:
           node-version: 22
           cache: 'npm'
 
+      - name: Update npm
+        run: |
+          npm install -g npm@11.7.0
+          npm -v
+
       - name: Install dependencies
         run: npm ci
 
@@ -90,4 +98,3 @@ jobs:
           github_token: ${{ secrets.GITHUB_TOKEN }}
         env:
           HUSKY: 0
-