diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0cea422..c645e1f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -47,5 +47,7 @@ jobs:
           cache: npm
           registry-url: 'https://registry.npmjs.org'
 
+      # Ensure npm 11.5.1 or later for trusted publishing
+      - run: npm install -g npm@11.5.1
       - run: npm ci
       - run: npm publish --provenance --access public