diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 846fbcb..46d72d1 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -12,7 +12,7 @@ permissions:
   security-events: write
 
 env:
-  NODE_VERSION: 20
+  NODE_VERSION: "24"
 
 jobs:
   analyze:
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 54b3a25..b5c147a 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -14,7 +14,7 @@ on:
       - 'v*'
 
 env:
-  NODE_VERSION: "24" # at least Node 24 is required for Trusted Publishing with OIDC
+  NODE_VERSION: "24"
 
 jobs:
   publish:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 74e4e10..5817870 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -14,7 +14,7 @@ on:
       - '.github/*-releases.json'
 
 env:
-  NODE_VERSION: "20"
+  NODE_VERSION: "24"
   BUILDX_VERSION: "v0.32.0-rc2"
   BUILDKIT_IMAGE: "moby/buildkit:v0.28.0-rc2"
 
diff --git a/dev.Dockerfile b/dev.Dockerfile
index d319682..fa810c3 100644
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -14,7 +14,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-ARG NODE_VERSION=20
+ARG NODE_VERSION=24
 ARG DOCKER_VERSION=29.2
 ARG BUILDX_VERSION=0.32.0-rc2
 ARG COMPOSE_VERSION=2.39.1
diff --git a/package.json b/package.json
index 80085fe..4289774 100644
--- a/package.json
+++ b/package.json
@@ -70,7 +70,7 @@
     "@types/gunzip-maybe": "^1.4.3",
     "@types/he": "^1.2.3",
     "@types/js-yaml": "^4.0.9",
-    "@types/node": "^20.19.35",
+    "@types/node": "^24.11.0",
     "@types/semver": "^7.7.1",
     "@types/tar-stream": "^3.1.4",
     "@types/tmp": "^0.2.6",
diff --git a/yarn.lock b/yarn.lock
index 969ba9d..907140e 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -386,7 +386,7 @@ __metadata:
     "@types/gunzip-maybe": "npm:^1.4.3"
     "@types/he": "npm:^1.2.3"
     "@types/js-yaml": "npm:^4.0.9"
-    "@types/node": "npm:^20.19.35"
+    "@types/node": "npm:^24.11.0"
     "@types/semver": "npm:^7.7.1"
     "@types/tar-stream": "npm:^3.1.4"
     "@types/tmp": "npm:^0.2.6"
@@ -1368,12 +1368,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@types/node@npm:^20.19.35":
-  version: 20.19.35
-  resolution: "@types/node@npm:20.19.35"
+"@types/node@npm:^24.11.0":
+  version: 24.11.0
+  resolution: "@types/node@npm:24.11.0"
   dependencies:
-    undici-types: "npm:~6.21.0"
-  checksum: 10/f14fa74f9ae4d1109d8a8e3ec31b6518122b3d31c28fd5725cb3eef8ff64d7cf6f8da9c84c78b512e2968006ec325c82a413cc2062da7b3c3230c882e88babba
+    undici-types: "npm:~7.16.0"
+  checksum: 10/d2f4f898c6a0f14980e55c697904fb58681729fc46b4e264d5f64dc391b23da73c9b422cfffbca28c045e6e8eca72dab5f28ed633faa95398ef1528af5398382
   languageName: node
   linkType: hard
 
@@ -4781,10 +4781,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"undici-types@npm:~6.21.0":
-  version: 6.21.0
-  resolution: "undici-types@npm:6.21.0"
-  checksum: 10/ec8f41aa4359d50f9b59fa61fe3efce3477cc681908c8f84354d8567bb3701fafdddf36ef6bff307024d3feb42c837cf6f670314ba37fc8145e219560e473d14
+"undici-types@npm:~7.16.0":
+  version: 7.16.0
+  resolution: "undici-types@npm:7.16.0"
+  checksum: 10/db43439f69c2d94cc29f75cbfe9de86df87061d6b0c577ebe9bb3255f49b22c50162a7d7eb413b0458b6510b8ca299ac7cff38c3a29fbd31af9f504bcf7fbc0d
   languageName: node
   linkType: hard