diff --git a/ui/pnpm-workspace.yaml b/ui/pnpm-workspace.yaml
index ab3e084e51..d7bc132be2 100644
--- a/ui/pnpm-workspace.yaml
+++ b/ui/pnpm-workspace.yaml
@@ -1,6 +1,3 @@
-# pnpm 11+ workspace config. .npmrc is auth/registry only; everything else lives here.
-# Reference: https://pnpm.io/supply-chain-security
-
 packages: []
 
 # Refuse to install on Node/pnpm outside the `engines` block in package.json.
@@ -62,7 +59,7 @@ overrides:
   # does not float past StepSecurity's 7-day npm cooldown gate.
   "browserslist": "4.28.7"
   "caniuse-lite": "1.0.30001792"
-  "baseline-browser-mapping": "2.10.29"
+  "baseline-browser-mapping": "2.11.0"
   "minimatch@<4": "3.1.4"
   "minimatch@>=9 <10": "9.0.7"
   "minimatch@>=10": "10.2.3"
@@ -157,3 +154,6 @@ trustPolicyExclude:
 
 # Block transitive dependencies from using exotic specifiers (git URLs, tarballs).
 blockExoticSubdeps: true
+minimumReleaseAgeExclude:
+  # Renovate security update: baseline-browser-mapping@2.11.0
+  - baseline-browser-mapping@2.11.0