ci: pin npm to 11.5.1 in the publish workflow

[frontegg-david]

The Publish Release run for 2.3.3 (https://github.com/agentfront/vectoriadb/actions/runs/37323445753) failed at Update npm CLI for trusted publishing:

npm error notsup Not compatible with your version of node/npm: npm@12.2.0
npm error notsup Required: {"node":"^22.22.2 || ^24.15.0 || >=26.0.0"}
npm error notsup Actual:   {"npm":"11.6.2","node":"v24.11.1"}

The step installed npm@latest, which is now npm 12. That release requires a newer Node than the v24.11 that .nvmrc pins. The run stopped before Compute version, so it bumped nothing and published nothing.

This pins npm@11.5.1, the first npm with OIDC trusted publishing. Its engines field accepts Node 24.11, and agentfront/frontmcp's publish workflow pins the same version. Once this merges, rerun Publish Release on release/2.3.x to publish 2.3.3 with the worker-entry fix (#17).

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Essentials
• Run ID: 4c1d9d0c-c158-41e5-8ae8-fa11aacc8ddf

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Cherry-pick Created

A cherry-pick PR to main has been automatically created.

Please review and merge if this change should also be in main.

If the cherry-pick is not needed, close the PR.