- Fixed GitLab hosted dependencies URL handling to avoid 406 errors and invalid module specifiers.
- Honored NPM_CONFIG_USERCONFIG when locating the user .npmrc, restoring GitHub Actions authentication with actions/setup-node.
- Fixed several bug regressions: bundleDependencies not packed, CLI crash on unsupported Node versions, prefix install overwriting workspace.yaml, and provenance publishing with semver build metadata.