diff --git a/.circleci/config.yml b/.circleci/config.yml
index b29f313..f1f948b 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -25,7 +25,7 @@ commands:
           command: sudo corepack disable
       - run:
           name: Install pnpm
-          command: sudo npm i -g pnpm@^10
+          command: sudo npm i -g pnpm@^11
       - run:
           name: Install dependencies
           command: pnpm install
diff --git a/package.json b/package.json
index 76a5af3..f82bb12 100644
--- a/package.json
+++ b/package.json
@@ -81,7 +81,7 @@
   },
   "engines": {
     "node": ">=24.11.0",
-    "pnpm": ">=10.28.0",
+    "pnpm": "^11.9.0",
     "yarn": "\n\n┌─────────────────────────┐\n│  Hey, we use pnpm now!  │\n└─────────────────────────┘\n\n"
   },
   "author": "CKSource (http://cksource.com/)",
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 3e00f3e..9e81edb 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -11,7 +11,7 @@ allowBuilds:
   msgpackr-extract: false
   nice-napi: true
   protobufjs: true
-  snyk: false
+  snyk: true
 
 overrides:
   'diff@^7': '^8.0.3'
@@ -34,3 +34,4 @@ minimumReleaseAgeExclude:
 shellEmulator: true
 shamefullyHoist: true
 preferFrozenLockfile: true
+verifyDepsBeforeRun: false