chore: remove org-enforced workflows and bump next to 16.4.2

.github/workflows/release.yaml

@@ -15,7 +15,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up Node.js
-        uses: labd/gh-actions-typescript/pnpm-install@a43f95146e7e81612083238af16f503de7f614a8 # v1.0.3
+        uses: labd/gh-actions-typescript/pnpm-install@ada4548df9a365c62c8b396b583953c6d4bc113f # v1.1.0
 
       - name: Lint
         run: pnpm lint
@@ -28,7 +28,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up Node.js
-        uses: labd/gh-actions-typescript/pnpm-install@a43f95146e7e81612083238af16f503de7f614a8 # v1.0.3
+        uses: labd/gh-actions-typescript/pnpm-install@ada4548df9a365c62c8b396b583953c6d4bc113f # v1.1.0
 
       - name: Check types
         run: pnpm tsc
@@ -41,7 +41,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up Node.js
-        uses: labd/gh-actions-typescript/pnpm-install@a43f95146e7e81612083238af16f503de7f614a8 # v1.0.3
+        uses: labd/gh-actions-typescript/pnpm-install@ada4548df9a365c62c8b396b583953c6d4bc113f # v1.1.0
 
       - name: Test
         run: pnpm test
@@ -59,7 +59,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up Node.js
-        uses: labd/gh-actions-typescript/pnpm-install@a43f95146e7e81612083238af16f503de7f614a8 # v1.0.3
+        uses: labd/gh-actions-typescript/pnpm-install@ada4548df9a365c62c8b396b583953c6d4bc113f # v1.1.0
         with:
           node-version: ${{ matrix.node }}
 
@@ -83,9 +83,10 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Node.js
-        uses: labd/gh-actions-typescript/pnpm-install@a43f95146e7e81612083238af16f503de7f614a8 # v1.0.3
+        uses: labd/gh-actions-typescript/pnpm-install@ada4548df9a365c62c8b396b583953c6d4bc113f # v1.1.0
         with:
           node-version: 24.x
+          cache: false
 
       - name: Build
         run: pnpm build
@@ -99,6 +100,9 @@ jobs:
           pr-title: "Release new version"
           commit-message: "update version"
           publish-script: pnpm publish:ci
+          # v2 pushes the release commit and tags through the GitHub API; the
+          # git CLI path keeps the previous behaviour.
+          push-with-git-cli: true
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_CONFIG_PROVENANCE: true

package.json

@@ -4,13 +4,14 @@
 	"author": "Boris Besemer",
 	"publishConfig": {
 		"access": "public",
-		"registry": "https://registry.npmjs.org/"
+		"registry": "https://registry.npmjs.org/",
+		"provenance": true
 	},
 	"module": "dist/index.js",
 	"homepage": "https://github.com/labd/nextjs-basic-auth-middleware#readme",
 	"repository": {
 		"type": "git",
-		"url": "https://github.com/labd/nextjs-basic-auth-middleware"
+		"url": "git+https://github.com/labd/nextjs-basic-auth-middleware.git"
 	},
 	"license": "MIT",
 	"main": "dist/index.cjs",
@@ -45,7 +46,7 @@
 		"@changesets/cli": "3.0.3",
 		"@types/node": "26.6.4",
 		"@vitest/coverage-v8": "5.0.3",
-		"next": "16.4.0",
+		"next": "16.4.2",
 		"tsdown": "0.23.0",
 		"typescript": "7.0.2",
 		"vitest": "5.0.3"

pnpm-workspace.yaml

@@ -4,3 +4,7 @@ allowBuilds:
 # Require packages to be at least 7 days old before being allowed to be installed
 minimumReleaseAge: 10080
 trustPolicy: no-downgrade
+
+savePrefix: ""
+autoInstallPeers: true
+strictPeerDependencies: false