diff --git a/package.json b/package.json
index fed1311..6616845 100644
--- a/package.json
+++ b/package.json
@@ -34,8 +34,5 @@
   },
   "engines": {
     "node": ">=22"
-  },
-  "pnpm": {
-    "onlyBuiltDependencies": ["better-sqlite3", "esbuild", "sharp"]
   }
 }
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 8a0f315..a40c437 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,9 +1,9 @@
-# pnpm 10+ moved several settings out of package.json's "pnpm" field into
-# this file. `onlyBuiltDependencies` allow-lists packages permitted to run
-# install/build scripts (pnpm now blocks build scripts by default). Without
-# this, better-sqlite3's native binary is never compiled and the server
-# crashes at runtime with ERR_DLOPEN_FAILED / NODE_MODULE_VERSION mismatch.
-onlyBuiltDependencies:
-  - better-sqlite3
-  - esbuild
-  - sharp
+# pnpm 10+ stopped reading build-script settings from package.json's "pnpm"
+# field and blocks dependency build scripts by default. pnpm 11 reads the
+# allow-list from `allowBuilds` here (captured via `pnpm approve-builds`).
+# Without it, better-sqlite3's native binary is never compiled and the SSR
+# server crashes at runtime (ERR_DLOPEN_FAILED / NODE_MODULE_VERSION mismatch).
+allowBuilds:
+  better-sqlite3: true
+  esbuild: true
+  sharp: true