diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 0126cf9..cdaf544 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -82,7 +82,7 @@ jobs:
       - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413  # v6.1.0
         env:
           # renovate: datasource=npm depName=pnpm
-          PNPM_VERSION: 12.9.1
+          PNPM_VERSION: 12.10.1
         with:
           version: ${{ env.PNPM_VERSION }}
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020  # v7.0.0
diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml
index 06c5556..79ff907 100644
--- a/.github/workflows/docs.yaml
+++ b/.github/workflows/docs.yaml
@@ -32,7 +32,7 @@ jobs:
       - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413  # v6.1.0
         env:
           # renovate: datasource=npm depName=pnpm
-          PNPM_VERSION: 12.9.1
+          PNPM_VERSION: 12.10.1
         with:
           version: ${{ env.PNPM_VERSION }}
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020  # v7.0.0
diff --git a/mise.toml b/mise.toml
index 4bcd5d9..7b267c6 100644
--- a/mise.toml
+++ b/mise.toml
@@ -4,7 +4,7 @@ uv = "0.12"
 # together. uv is a range on purpose: see required-version in pyproject.toml.
 task = "3.54.0"
 node = "24.21.0"
-pnpm = "12.9.1"
+pnpm = "12.10.1"
 
 [env]
 # Stop ad-hoc `uv run` from rewriting uv.lock as a side effect. The lockfile