- Added OIDC authentication support for the npm plugin (CircleCI) and introduced the `approvedGitRepositories` configuration option.
- Changed the default `enableScripts` to false and updated the `exec:` protocol to respect this flag, introducing a breaking behavior change.
- Fixed multiple issues including Node 25.7+ EBADF errors, PnP watch mode handling, and clarified the experimental ESM support warning.