diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1c3bcad..4fef3bc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -73,7 +73,9 @@ jobs:
           registry-url: "https://registry.npmjs.org"
 
       - name: Update npm
-        run: npm install -g npm@latest
+        # npm@12 requires Node >=22.22.2, newer than the pinned NODE_VERSION.
+        # Pin the npm major so `latest` drift cannot break releases.
+        run: npm install -g npm@11
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4