diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a00c015..feedd73 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -94,16 +94,16 @@ jobs:
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
 
-      - name: Set up pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
+      - name: Set up pnpm and Node.js
+        uses: pnpm/setup@f7d0e5f4b1b3089d2799ef9722859e7ba314c4c8 # v1
         with:
-          version: 10.33.0
-
-      - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
-        with:
-          node-version: 24
-          cache: pnpm
+          # TODO: pnpm/setup does not read .nvmrc yet. Keep this in sync with .nvmrc
+          # until https://github.com/jasongin/nvs/pull/315 lands.
+          # pnpm/setup installs runtimes via pnpm runtime, which requires pnpm >=11.1.0.
+          version: 11.7.0
+          runtime: node@24
+          cache: true
+          install: false
 
       - name: Install changesets dependencies
         run: pnpm install --frozen-lockfile
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..c400337
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,3 @@
+# Minimum age (in days) before a package version can be installed
+# 7 days
+min-release-age=7
diff --git a/package.json b/package.json
index 721a942..bbde778 100644
--- a/package.json
+++ b/package.json
@@ -3,7 +3,7 @@
   "private": true,
   "description": "Release metadata and changesets for the PostHog Ruby SDK",
   "license": "MIT",
-  "packageManager": "pnpm@10.33.0",
+  "packageManager": "pnpm@11.7.0",
   "scripts": {
     "changeset": "changeset"
   },