diff --git a/.github/workflows/action.yml b/.github/workflows/action.yml
index 3408d22..0599e23 100644
--- a/.github/workflows/action.yml
+++ b/.github/workflows/action.yml
@@ -21,7 +21,7 @@ jobs:
 
       - uses: actions/setup-node@v7
         with:
-          node-version: 22
+          node-version: 22.23.4
           cache: pnpm
 
       - run: pnpm install --frozen-lockfile
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a9822ab..cfe91b4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [20, 22, 24]
+        node-version: [22, 24]
     steps:
       - name: Checkout code
         uses: actions/checkout@v7
@@ -74,7 +74,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: 22
+          node-version: 22.23.4
           cache: pnpm
           cache-dependency-path: site/pnpm-lock.yaml
 
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index 8788767..6acc002 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -41,7 +41,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: "24"
+          node-version: 24.22.1
           registry-url: "https://registry.npmjs.org"
           package-manager-cache: false
 
diff --git a/.github/workflows/site.yml b/.github/workflows/site.yml
index 20a08bc..4ae0c38 100644
--- a/.github/workflows/site.yml
+++ b/.github/workflows/site.yml
@@ -41,7 +41,7 @@ jobs:
 
       - uses: actions/setup-node@v7
         with:
-          node-version: 22
+          node-version: 22.23.4
           cache: pnpm
           cache-dependency-path: site/pnpm-lock.yaml
 
diff --git a/AGENTS.md b/AGENTS.md
index 32a5945..fda3332 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -42,7 +42,7 @@ the StartupKit Stack, so it carries no stack-specific section.
 | Create GitHub Release (triggers npm publish) | `pnpm release` |
 | Site dev / build | `pnpm --dir site dev` / `pnpm --dir site build` |
 
-Package manager is **pnpm** (`pnpm@9.7.1`). Node 20+ (CI runs 20, 22, 24).
+Package manager is **pnpm** (`pnpm@9.7.1`). Node 22+ (CI runs 22 and 24, which float to the newest patched release).
 
 Before opening a change, run `pnpm lint && pnpm typecheck && pnpm test`, and
 `pnpm build` if you touched anything that affects the published output.
diff --git a/action.yml b/action.yml
index a7b64b4..cf7f9ad 100644
--- a/action.yml
+++ b/action.yml
@@ -38,7 +38,7 @@ inputs:
     default: ""
   node-version:
     description: Node.js version to set up. Set to "" to use the runner's Node.
-    default: "22"
+    default: "22.23.4"
 
 outputs:
   changed:
diff --git a/package.json b/package.json
index 4c05b0e..ae9e9c7 100644
--- a/package.json
+++ b/package.json
@@ -108,7 +108,7 @@
 		"vitest": "^3.2.7"
 	},
 	"engines": {
-		"node": ">=20"
+		"node": ">=22.23.4"
 	},
 	"packageManager": "pnpm@9.7.1"
 }
diff --git a/site/package.json b/site/package.json
index 08e6d68..16cab92 100644
--- a/site/package.json
+++ b/site/package.json
@@ -15,7 +15,7 @@
     "wrangler": "^4.142.0"
   },
   "engines": {
-    "node": ">=22.12.0"
+    "node": ">=22.23.4"
   },
   "packageManager": "pnpm@9.7.1"
 }