Merge pull request #567 from ForgeRock/fix-ci-again

fix(ci): remove broken npm self-install and remediate CVEs

Author: ryanbas21

.github/workflows/publish.yml

@@ -51,9 +51,6 @@ jobs:
         with:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
-      - run: npm install npm@latest -g
-      - run: npm --version
-
       - name: publish
         uses: changesets/action@v1
         id: changesets

package.json

@@ -132,7 +132,9 @@
   "pnpm": {
     "overrides": {
       "rollup": "^4.59.0",
-      "undici@^7": "^7.24.0"
+      "undici@^7": "^7.24.0",
+      "picomatch@>=4": "^4.0.4",
+      "picomatch@<3": "^2.3.2"
     }
   }
 }