## Summary
- Release publishing goes back to the GitHub Actions workflow with OIDC
trusted publishing and provenance.
- The ESRP pipeline stays available for manual on-demand runs only (no
automatic triggers).
The ESRP pipeline now publishes @next with current timestamp on manual
runs and @latest from v* release tags. The GitHub Actions npm publish
workflow is removed.
* chore(ci): bump checkout/setup-node to versions running on Node.js 24
GitHub is forcing JavaScript actions to Node 24 by default on
2026-06-02 and removing Node 20 from runners on 2026-09-16.
- actions/checkout@v4 -> v5
- actions/setup-node@v4 -> v5
* chore(ci): bump CI Node.js from 20 to 22
Node.js 20 reached end-of-life in April 2026.
* chore(ci): pin Node.js to 24, drop bundled npm upgrade
Node 24 ships npm 11.12.1, which already satisfies the npm 11.5.1+
requirement for OIDC npm publishing.
* chore(ci): keep CI on Node.js 22 (oldest active LTS)
Use the oldest supported LTS in CI to catch any reliance on
newer-Node-only behavior. Publish job stays on 24 for the
bundled npm 11.
Yury Semikhatsky