fix(ci): remove npm self-update step that corrupted hostedtoolcache (0.16.1)

Author: nolrm

.github/workflows/publish.yml

@@ -26,9 +26,6 @@ jobs:
           node-version: '22.x'
           registry-url: 'https://registry.npmjs.org/'
 
-      - name: Upgrade npm for trusted publishing
-        run: npm install -g npm@latest
-
       - name: Install dependencies
         run: npm ci
 

CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## [0.16.1] - 2026-04-09
+
+### Fixed
+- **CI: npm self-update removed** — `npm install -g npm@latest` was corrupting the npm installation in the GitHub Actions hostedtoolcache; Node 22 ships with npm 10+ which already supports `--provenance`
+
 ## [0.16.0] - 2026-04-09
 
 ### Added

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nolrm/contextkit",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "description": "ContextKit - Context Engineering for AI Development. Provide rich context to AI through structured MD files with standards, code guides, and documentation. Works with Cursor, Claude, Aider, VS Code Copilot, and more.",
   "main": "lib/index.js",
   "bin": {