diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index b93ba58..77725c0 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -30,10 +30,9 @@ jobs:
       - uses: pnpm/action-setup@v5
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           registry-url: 'https://registry.npmjs.org'
           cache: pnpm
-      - run: npm install -g npm@latest # ensure that the globally installed npm is new enough to support OIDC
       - run: pnpm install --frozen-lockfile
       - name: Publish to NPM
         run: NPM_CONFIG_PROVENANCE=true pnpm release-plan publish
diff --git a/publish-template.yml.ejs b/publish-template.yml.ejs
index e23d74c..d0b8dea 100644
--- a/publish-template.yml.ejs
+++ b/publish-template.yml.ejs
@@ -32,10 +32,9 @@ jobs:
           version: 9<% } %><% } %>
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           registry-url: 'https://registry.npmjs.org'<% if (pnpm) { %>
-          cache: pnpm<% } %>
-      - run: npm install -g npm@latest # ensure that the globally installed npm is new enough to support OIDC<% if (pnpm) { %>
+          cache: pnpm
       - run: pnpm install --frozen-lockfile
       - name: Publish to NPM
         run: NPM_CONFIG_PROVENANCE=true pnpm release-plan publish<% } else { %>