diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7dbe06010..00df0a797 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -622,10 +622,11 @@ jobs:
            with:
               node-version: "24"
               registry-url: "https://registry.npmjs.org"
-         # Keep npm aligned with trusted publishing setup (>= 11.16.0).
+         # npm runs under Bun when invoked by the release script; npm 12
+         # requires a newer emulated Node version than Bun 1.3 provides.
          - name: Ensure npm supports trusted publishing
            if: ${{ !inputs.skip_npm }}
-           run: npm install -g npm@latest
+           run: npm install -g npm@11.17.0
          - name: Cache bun dependencies
            uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
            with:
@@ -775,9 +776,10 @@ jobs:
            with:
               node-version: "24"
               registry-url: "https://registry.npmjs.org"
-         # Keep npm aligned with trusted publishing setup (>= 11.16.0).
+         # npm runs under Bun when invoked by the release script; npm 12
+         # requires a newer emulated Node version than Bun 1.3 provides.
          - name: Ensure npm supports trusted publishing
-           run: npm install -g npm@latest
+           run: npm install -g npm@11.17.0
          - name: Cache bun dependencies
            uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
            with: