A recent version changed the behavior which excluded the root...
https://github.com/pnpm/pnpm/releases/tag/v10.28.1

Also bump node version in the action to ensure we get a new enough npm
to support trusted publishing.