From ebb0aded8c81977318422041c54720d446e16b16 Mon Sep 17 00:00:00 2001
From: bntvllnt <32437578+bntvllnt@users.noreply.github.com>
Date: Mon, 31 Aug 2026 17:32:41 +0200
Subject: [PATCH] fix: isolate npm CLI installation

---
 .github/workflows/publish.yml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 2ae34cf..1ce7548 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -65,7 +65,10 @@ jobs:
           registry-url: https://registry.npmjs.org
 
       - name: Install OIDC-capable npm
-        run: npm install --global npm@12.0.2
+        run: |
+          npm install --global --prefix "$RUNNER_TEMP/npm-cli" npm@12.0.2
+          "$RUNNER_TEMP/npm-cli/bin/npm" --version
+          echo "$RUNNER_TEMP/npm-cli/bin" >> "$GITHUB_PATH"
 
       - name: Publish canary
         run: |
@@ -120,7 +123,10 @@ jobs:
           grep -F "## [$VERSION]" CHANGELOG.md
 
       - name: Install OIDC-capable npm
-        run: npm install --global npm@12.0.2
+        run: |
+          npm install --global --prefix "$RUNNER_TEMP/npm-cli" npm@12.0.2
+          "$RUNNER_TEMP/npm-cli/bin/npm" --version
+          echo "$RUNNER_TEMP/npm-cli/bin" >> "$GITHUB_PATH"
 
       - name: Publish or reconcile npm package
         env: