diff --git a/.github/workflows/release-sdk.yml b/.github/workflows/release-sdk.yml
index 49c9ecd..f13feda 100644
--- a/.github/workflows/release-sdk.yml
+++ b/.github/workflows/release-sdk.yml
@@ -12,7 +12,7 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: jdx/mise-action@v4
       - name: install:ts
         run: mise run install:ts
@@ -23,6 +23,9 @@ jobs:
         working-directory: sdk/ts
       - name: build:ts
         run: mise run build:ts
+      - name: upgrade npm
+        # OIDC trusted publishing requires npm >= 11.5.1; node LTS ships npm 10.
+        run: npm install -g npm@latest
       - name: publish
         run: npm publish --access public
         working-directory: sdk/ts
diff --git a/sdk/ts/package-lock.json b/sdk/ts/package-lock.json
index f6cc420..f2b4814 100644
--- a/sdk/ts/package-lock.json
+++ b/sdk/ts/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@beyond.dev/auth",
-  "version": "0.1.0-dev",
+  "version": "0.1.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@beyond.dev/auth",
-      "version": "0.1.0-dev",
+      "version": "0.1.1",
       "dependencies": {
         "@beyond.dev/openapi-react": "^0.1.1",
         "fastify-plugin": "^5.0.1",
diff --git a/sdk/ts/package.json b/sdk/ts/package.json
index 96e2cef..94433e0 100644
--- a/sdk/ts/package.json
+++ b/sdk/ts/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@beyond.dev/auth",
-  "version": "0.1.0-dev",
+  "version": "0.1.1",
   "type": "module",
   "repository": {
     "type": "git",