diff --git a/.github/workflows/anchor-link-audit.yml b/.github/workflows/anchor-link-audit.yml
index ea189a0a95b17e3..8b730eb22865038 100644
--- a/.github/workflows/anchor-link-audit.yml
+++ b/.github/workflows/anchor-link-audit.yml
@@ -21,7 +21,7 @@ jobs:
       - name: Set up pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         with:
-          version: 10
+          version: 11
 
       - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
         id: setup-node
diff --git a/.github/workflows/bigbonk.yml b/.github/workflows/bigbonk.yml
index b5a9299a79c4e6b..aa5ebcda7d40b16 100644
--- a/.github/workflows/bigbonk.yml
+++ b/.github/workflows/bigbonk.yml
@@ -31,7 +31,7 @@ jobs:
       - name: Set up pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         with:
-          version: 10
+          version: 11
 
       - name: Setup Node.js
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
diff --git a/.github/workflows/bonk.yml b/.github/workflows/bonk.yml
index d67cc7b010d25ee..eb022b521a7fa30 100644
--- a/.github/workflows/bonk.yml
+++ b/.github/workflows/bonk.yml
@@ -57,7 +57,7 @@ jobs:
       - name: Set up pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         with:
-          version: 10
+          version: 11
 
       - name: Setup Node.js
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
@@ -112,7 +112,7 @@ jobs:
       - name: Set up pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         with:
-          version: 10
+          version: 11
 
       - name: Setup Node.js
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4b99b70c559df3c..1f714d4b04f256f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -25,7 +25,7 @@ jobs:
       - name: Set up pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         with:
-          version: 10
+          version: 11
 
       - name: Set up node
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
@@ -122,7 +122,7 @@ jobs:
       - name: Set up pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         with:
-          version: 10
+          version: 11
 
       - name: Set up node
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
@@ -189,7 +189,7 @@ jobs:
       - name: Set up pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         with:
-          version: 10
+          version: 11
 
       - name: Set up node
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
@@ -245,7 +245,7 @@ jobs:
       - name: Set up pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         with:
-          version: 10
+          version: 11
 
       - name: Set up node
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
@@ -302,7 +302,7 @@ jobs:
       - name: Set up pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         with:
-          version: 10
+          version: 11
 
       - name: Set up node
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
diff --git a/.github/workflows/publish-production.yml b/.github/workflows/publish-production.yml
index 1d03dc7b06e4160..aa37483291630c8 100644
--- a/.github/workflows/publish-production.yml
+++ b/.github/workflows/publish-production.yml
@@ -18,7 +18,7 @@ jobs:
       - name: Set up pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         with:
-          version: 10
+          version: 11
 
       - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
         id: setup-node
diff --git a/.npmrc b/.npmrc
deleted file mode 100644
index 3e67b5c7ef7cc39..000000000000000
--- a/.npmrc
+++ /dev/null
@@ -1,2 +0,0 @@
-save-dev=true
-save-exact=true
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index bf2d69394cd06ed..ddb3e37e0773886 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -8,8 +8,18 @@ blockExoticSubdeps: true
 
 # Explicit allowlist of packages permitted to run install scripts.
 # These are well-known packages that require build scripts to download platform-specific binaries.
-onlyBuiltDependencies:
-  - esbuild
-  - sharp
-  - tldjs
-  - workerd
+allowBuilds:
+  esbuild: true
+  sharp: true
+  tldjs: true
+  workerd: true
+  # Transitive deps of @flue/runtime and agents — native binaries not needed by this repo
+  "@google/genai": false
+  "@mongodb-js/zstd": false
+  core-js-pure: false
+  node-liblzma: false
+  protobufjs: false
+
+# Always save dependencies as exact versions and to devDependencies by default.
+saveExact: true
+saveDev: true