ci: fix release flow order and drop broken npm upgrade step

.github/workflows/release.yml

@@ -8,36 +8,6 @@ on:
         type: string
 
 jobs:
-  publish-npm:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      id-token: write
-    steps:
-      - name: Checkout tag
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          ref: v${{ inputs.version }}
-
-      - name: Use Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
-        with:
-          node-version-file: '.nvmrc'
-
-      - name: Upgrade npm
-        run: npm install -g npm@latest
-
-      - name: Install deps
-        run: npm ci --audit=false
-
-      - name: Install client deps
-        run: npm ci --audit=false
-        working-directory: client
-
-      - name: Publish client to npm
-        run: npm publish --provenance --access public
-        working-directory: client
-
   publish-docker:
     runs-on: ubuntu-latest
     permissions:
@@ -81,8 +51,37 @@ jobs:
           labels: ${{ steps.docker_meta.outputs.labels }}
           push: true
 
+  publish-npm:
+    runs-on: ubuntu-latest
+    needs: publish-docker
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Checkout tag
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          ref: v${{ inputs.version }}
+
+      - name: Use Node.js
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Install deps
+        run: npm ci --audit=false
+
+      - name: Install client deps
+        run: npm ci --audit=false
+        working-directory: client
+
+      - name: Publish client to npm
+        run: npm publish --provenance --access public
+        working-directory: client
+
   github-release:
     runs-on: ubuntu-latest
+    needs: publish-npm
     permissions:
       contents: write
     steps: