diff --git a/.changeset/selfish-papayas-itch.md b/.changeset/selfish-papayas-itch.md
new file mode 100644
index 0000000000..3c2dd28a99
--- /dev/null
+++ b/.changeset/selfish-papayas-itch.md
@@ -0,0 +1,6 @@
+---
+"@hyperdx/api": patch
+"@hyperdx/app": patch
+---
+
+Bumped node version in .nvmrc to 22.22.2
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b899b51239..859955caba 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -31,7 +31,10 @@ jobs:
       # LTS ships npm 10.x, which has no OIDC code path and falls back to
       # NODE_AUTH_TOKEN, failing ENEEDAUTH.
       - name: Upgrade npm for OIDC trusted publishing
-        run: npm install -g npm@latest
+        # Pin to 11.x (not @latest): OIDC only needs npm >= 11.5.1, and floating
+        # tags drag in majors that raise the node floor / lack a stable GA and
+        # break CI. 11.x supports node 22.9+.
+        run: npm install -g npm@11
       - name: Configure npm registry
         run: npm config set registry https://registry.npmjs.org/
       - name: Install root dependencies
diff --git a/.nvmrc b/.nvmrc
index 5767036af0..db49bb14d7 100644
--- a/.nvmrc
+++ b/.nvmrc
@@ -1 +1 @@
-22.21.1
+22.22.2