diff --git a/.github/workflows/release-sdk.yml b/.github/workflows/release-sdk.yml
index ea7b53b..7a25fb8 100644
--- a/.github/workflows/release-sdk.yml
+++ b/.github/workflows/release-sdk.yml
@@ -12,7 +12,7 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: jdx/mise-action@v4
       - name: install:ts
         run: mise run install:ts
@@ -24,6 +24,9 @@ jobs:
         working-directory: sdk/ts/kv
       - name: build:ts
         run: mise run build:ts
+      - name: upgrade npm
+        # OIDC trusted publishing requires npm >= 11.5.1; node LTS ships npm 10.
+        run: npm install -g npm@latest
       - name: publish
         run: npm publish --access public
         working-directory: sdk/ts/kv
diff --git a/sdk/ts/flags/package.json b/sdk/ts/flags/package.json
index c0f5968..d266cf4 100644
--- a/sdk/ts/flags/package.json
+++ b/sdk/ts/flags/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@beyond.dev/flags",
-  "version": "0.1.0-dev",
+  "version": "0.1.0",
   "type": "module",
   "repository": {
     "type": "git",
diff --git a/sdk/ts/kv/package.json b/sdk/ts/kv/package.json
index 5457109..d77ab0b 100644
--- a/sdk/ts/kv/package.json
+++ b/sdk/ts/kv/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@beyond.dev/kv",
-  "version": "0.1.0-dev",
+  "version": "0.1.0",
   "type": "module",
   "repository": {
     "type": "git",
diff --git a/sdk/ts/package-lock.json b/sdk/ts/package-lock.json
index cf8f47e..b199e68 100644
--- a/sdk/ts/package-lock.json
+++ b/sdk/ts/package-lock.json
@@ -13,7 +13,7 @@
     },
     "flags": {
       "name": "@beyond.dev/flags",
-      "version": "0.1.0-dev",
+      "version": "0.1.0",
       "dependencies": {
         "@beyond.dev/kv": "*",
         "std-env": "^3.9.0",
@@ -263,7 +263,7 @@
     },
     "kv": {
       "name": "@beyond.dev/kv",
-      "version": "0.1.0-dev",
+      "version": "0.1.0",
       "dependencies": {
         "ioredis": "^5.10.1",
         "openapi-fetch": "^0.17.0",
@@ -5555,7 +5555,7 @@
     },
     "rate-limit": {
       "name": "@beyond.dev/rate-limit",
-      "version": "0.1.0-dev",
+      "version": "0.1.0",
       "dependencies": {
         "@beyond.dev/kv": "*",
         "std-env": "^3.9.0",
diff --git a/sdk/ts/rate-limit/package.json b/sdk/ts/rate-limit/package.json
index f03d173..648d5f6 100644
--- a/sdk/ts/rate-limit/package.json
+++ b/sdk/ts/rate-limit/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@beyond.dev/rate-limit",
-  "version": "0.1.0-dev",
+  "version": "0.1.0",
   "type": "module",
   "repository": {
     "type": "git",