diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ebfa8da..186b7a5 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -12,14 +12,15 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v6
         with:
-          node-version: '20.x'
+          node-version: '24.x'
           registry-url: 'https://registry.npmjs.org'
+      - run: npm install -g npm@11 --registry=https://registry.npmjs.org
       - run: npm ci
       - run: npm run build
-      - run: npm publish
+      - run: npm publish --allow-directory=all
         # For now we only publish on tags here and assume the version number is already correct.
         # If we change this then we need to automate updating the version number.
         if: github.event_name == 'release' && github.event.action == 'created'
diff --git a/.npmrc b/.npmrc
index 94a06c2..ad165a7 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1 +1,15 @@
 access=public
+
+min-release-age=7
+min-release-age-exclude[]=@microbit/*
+min-release-age-exclude[]=@microbit-foundation/*
+
+# root here means this project's package.json
+allow-git=root
+allow-remote=root
+allow-file=root
+allow-directory=root
+
+strict-allow-scripts=true
+
+engine-strict=true
diff --git a/package-lock.json b/package-lock.json
index 6106d90..85f28ae 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@microbit/sanity-plugin-python-editor-v3",
-  "version": "0.1.0-pre.10",
+  "version": "0.1.0-pre.11",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@microbit/sanity-plugin-python-editor-v3",
-      "version": "0.1.0-pre.10",
+      "version": "0.1.0-pre.11",
       "license": "MIT",
       "dependencies": {
         "@sanity/incompatible-plugin": "^1.0.4",
diff --git a/package.json b/package.json
index 8ec549e..b901289 100644
--- a/package.json
+++ b/package.json
@@ -8,6 +8,10 @@
   ],
   "license": "MIT",
   "author": "Micro:bit Educational Foundation <package-help@microbit.org>",
+  "allowScripts": {
+    "esbuild": true,
+    "fsevents": true
+  },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",