diff --git a/.changeset/ninety-jeans-listen.md b/.changeset/ninety-jeans-listen.md
new file mode 100644
index 000000000..97900f024
--- /dev/null
+++ b/.changeset/ninety-jeans-listen.md
@@ -0,0 +1,5 @@
+---
+'@baseplate-dev/create-project': patch
+---
+
+Upgrade pnpm to 10.18.3
diff --git a/examples/blog-with-auth/package.json b/examples/blog-with-auth/package.json
index 60e216af2..a7d434236 100644
--- a/examples/blog-with-auth/package.json
+++ b/examples/blog-with-auth/package.json
@@ -29,10 +29,10 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.1"
+    "pnpm": "^10.18.3"
   },
   "volta": {
     "node": "22.18.0"
   },
-  "packageManager": "pnpm@10.16.1"
+  "packageManager": "pnpm@10.18.3"
 }
diff --git a/examples/blog-with-auth/packages/admin/baseplate/generated/package.json b/examples/blog-with-auth/packages/admin/baseplate/generated/package.json
index a345e9ad8..9744f648b 100644
--- a/examples/blog-with-auth/packages/admin/baseplate/generated/package.json
+++ b/examples/blog-with-auth/packages/admin/baseplate/generated/package.json
@@ -91,7 +91,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/examples/blog-with-auth/packages/admin/package.json b/examples/blog-with-auth/packages/admin/package.json
index a345e9ad8..9744f648b 100644
--- a/examples/blog-with-auth/packages/admin/package.json
+++ b/examples/blog-with-auth/packages/admin/package.json
@@ -91,7 +91,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/examples/blog-with-auth/packages/backend/baseplate/generated/package.json b/examples/blog-with-auth/packages/backend/baseplate/generated/package.json
index 4899bb1e8..7ca234f77 100644
--- a/examples/blog-with-auth/packages/backend/baseplate/generated/package.json
+++ b/examples/blog-with-auth/packages/backend/baseplate/generated/package.json
@@ -90,7 +90,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/examples/blog-with-auth/packages/backend/package.json b/examples/blog-with-auth/packages/backend/package.json
index 4899bb1e8..7ca234f77 100644
--- a/examples/blog-with-auth/packages/backend/package.json
+++ b/examples/blog-with-auth/packages/backend/package.json
@@ -90,7 +90,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/examples/todo-with-auth0/package.json b/examples/todo-with-auth0/package.json
index 2ef610500..def45d1a8 100644
--- a/examples/todo-with-auth0/package.json
+++ b/examples/todo-with-auth0/package.json
@@ -31,10 +31,10 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.1"
+    "pnpm": "^10.18.3"
   },
   "volta": {
     "node": "22.18.0"
   },
-  "packageManager": "pnpm@10.16.1"
+  "packageManager": "pnpm@10.18.3"
 }
diff --git a/examples/todo-with-auth0/packages/admin/baseplate/generated/package.json b/examples/todo-with-auth0/packages/admin/baseplate/generated/package.json
index c199201dd..137e18e74 100644
--- a/examples/todo-with-auth0/packages/admin/baseplate/generated/package.json
+++ b/examples/todo-with-auth0/packages/admin/baseplate/generated/package.json
@@ -95,7 +95,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/examples/todo-with-auth0/packages/admin/package.json b/examples/todo-with-auth0/packages/admin/package.json
index c199201dd..137e18e74 100644
--- a/examples/todo-with-auth0/packages/admin/package.json
+++ b/examples/todo-with-auth0/packages/admin/package.json
@@ -95,7 +95,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/examples/todo-with-auth0/packages/backend/baseplate/generated/package.json b/examples/todo-with-auth0/packages/backend/baseplate/generated/package.json
index e06016ea2..e290d6b92 100644
--- a/examples/todo-with-auth0/packages/backend/baseplate/generated/package.json
+++ b/examples/todo-with-auth0/packages/backend/baseplate/generated/package.json
@@ -107,7 +107,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/examples/todo-with-auth0/packages/backend/package.json b/examples/todo-with-auth0/packages/backend/package.json
index 29c4cc2b3..587aaa585 100644
--- a/examples/todo-with-auth0/packages/backend/package.json
+++ b/examples/todo-with-auth0/packages/backend/package.json
@@ -108,7 +108,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/examples/todo-with-auth0/packages/web/baseplate/generated/package.json b/examples/todo-with-auth0/packages/web/baseplate/generated/package.json
index 5516b4a2c..e99410cd0 100644
--- a/examples/todo-with-auth0/packages/web/baseplate/generated/package.json
+++ b/examples/todo-with-auth0/packages/web/baseplate/generated/package.json
@@ -91,7 +91,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/examples/todo-with-auth0/packages/web/package.json b/examples/todo-with-auth0/packages/web/package.json
index 5516b4a2c..e99410cd0 100644
--- a/examples/todo-with-auth0/packages/web/package.json
+++ b/examples/todo-with-auth0/packages/web/package.json
@@ -91,7 +91,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/mise.toml b/mise.toml
index 9b8d339f9..1c40e8376 100644
--- a/mise.toml
+++ b/mise.toml
@@ -2,4 +2,4 @@ min_version = "2025.8.14"
 
 [tools]
 node = "22.18.0"
-pnpm = "10.16.1"
+pnpm = "10.18.3"
diff --git a/package.json b/package.json
index 0abfe74bd..9dfefc2c9 100644
--- a/package.json
+++ b/package.json
@@ -69,10 +69,10 @@
     "vitest": "catalog:",
     "workspace-meta": "0.1.4"
   },
-  "packageManager": "pnpm@10.16.1",
+  "packageManager": "pnpm@10.18.3",
   "engines": {
     "node": "^22.0.0",
-    "pnpm": "^10.16.1"
+    "pnpm": "^10.18.3"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/packages/core-generators/src/constants/node.ts b/packages/core-generators/src/constants/node.ts
index 861a5ea8f..d46bd016b 100644
--- a/packages/core-generators/src/constants/node.ts
+++ b/packages/core-generators/src/constants/node.ts
@@ -1,2 +1,2 @@
 export const NODE_VERSION = '22.18.0';
-export const PNPM_VERSION = '10.16.1';
+export const PNPM_VERSION = '10.18.3';
diff --git a/packages/create-project/src/project-creator.ts b/packages/create-project/src/project-creator.ts
index f5783c60c..775edf360 100644
--- a/packages/create-project/src/project-creator.ts
+++ b/packages/create-project/src/project-creator.ts
@@ -62,10 +62,10 @@ export async function generateBaseplateProject({
           devDependencies: {
             '@baseplate-dev/project-builder-cli': cliVersion,
           },
-          packageManager: 'pnpm@10.16.1',
+          packageManager: 'pnpm@10.18.3',
           engines: {
             node: '^22.0.0',
-            pnpm: '^10.16.1',
+            pnpm: '^10.18.3',
           },
           volta: {
             node: '22.18.0',
diff --git a/packages/create-project/src/project-creator.unit.test.ts b/packages/create-project/src/project-creator.unit.test.ts
index 3d8858f33..dbf837fbc 100644
--- a/packages/create-project/src/project-creator.unit.test.ts
+++ b/packages/create-project/src/project-creator.unit.test.ts
@@ -105,10 +105,10 @@ describe('generateBaseplateProject', () => {
       devDependencies: {
         '@baseplate-dev/project-builder-cli': cliVersion,
       },
-      packageManager: 'pnpm@10.16.1',
+      packageManager: 'pnpm@10.18.3',
       engines: {
         node: '^22.0.0',
-        pnpm: '^10.16.1',
+        pnpm: '^10.18.3',
       },
       volta: {
         node: '22.18.0',
diff --git a/tests/simple/package.json b/tests/simple/package.json
index 4f91d2f56..3086f4600 100644
--- a/tests/simple/package.json
+++ b/tests/simple/package.json
@@ -17,10 +17,10 @@
   "devDependencies": {
     "turbo": "2.5.0"
   },
-  "packageManager": "pnpm@10.16.1",
+  "packageManager": "pnpm@10.18.3",
   "engines": {
     "node": "^22.0.0",
-    "pnpm": "^10.16.1"
+    "pnpm": "^10.18.3"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/tests/simple/packages/backend/baseplate/generated/package.json b/tests/simple/packages/backend/baseplate/generated/package.json
index b98838467..fed646c04 100644
--- a/tests/simple/packages/backend/baseplate/generated/package.json
+++ b/tests/simple/packages/backend/baseplate/generated/package.json
@@ -85,7 +85,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/tests/simple/packages/backend/package.json b/tests/simple/packages/backend/package.json
index b98838467..fed646c04 100644
--- a/tests/simple/packages/backend/package.json
+++ b/tests/simple/packages/backend/package.json
@@ -85,7 +85,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/tests/simple/packages/web/baseplate/generated/package.json b/tests/simple/packages/web/baseplate/generated/package.json
index a2f9879ed..11701c17f 100644
--- a/tests/simple/packages/web/baseplate/generated/package.json
+++ b/tests/simple/packages/web/baseplate/generated/package.json
@@ -90,7 +90,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"
diff --git a/tests/simple/packages/web/package.json b/tests/simple/packages/web/package.json
index a2f9879ed..11701c17f 100644
--- a/tests/simple/packages/web/package.json
+++ b/tests/simple/packages/web/package.json
@@ -90,7 +90,7 @@
   },
   "engines": {
     "node": "^22.18.0",
-    "pnpm": "^10.16.0"
+    "pnpm": "^10.18.0"
   },
   "volta": {
     "node": "22.18.0"