Update ci.yml

Author: dhruva-reddy

.github/workflows/ci.yml

@@ -23,9 +23,6 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
-      - name: Update npm
-        run: sudo npm install -g npm@11.5.1
-
       - name: Compile
         run: pnpm build
 
@@ -52,12 +49,18 @@ jobs:
     needs: [ compile, test ]
     if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - name: Checkout repo
         uses: actions/checkout@v6
 
       - name: Set up node
         uses: actions/setup-node@v6
+        
+      - name: Update npm
+        run: sudo npm install -g npm@11.5.1
 
       - name: Install pnpm
         uses: pnpm/action-setup@v4