fix: configure npm OIDC trusted publishing correctly

.github/workflows/release-js-package.yml

@@ -9,7 +9,7 @@ on:
       - ".github/workflows/release-js-package.yml"
 
 permissions:
-  id-token: write  # Required for OIDC
+  id-token: write # Required for OIDC
   contents: read
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
@@ -28,10 +28,14 @@ jobs:
         uses: actions/setup-node@v3
         with:
           node-version: 20.x
+          registry-url: "https://registry.npmjs.org"
 
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
 
+      - name: Update npm for OIDC support
+        run: npm install -g npm@latest
+
       - name: Install dependencies
         run: pnpm install --frozen-lockfile