diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2c77baf..cfe829c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,13 +9,13 @@ jobs:
   build-test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
         with:
           version: 10
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
-          node-version: 20
+          node-version: 24
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - run: pnpm run typecheck
diff --git a/.github/workflows/threatcrush-scan.yml b/.github/workflows/threatcrush-scan.yml
index d9190b6..83fed51 100644
--- a/.github/workflows/threatcrush-scan.yml
+++ b/.github/workflows/threatcrush-scan.yml
@@ -19,9 +19,9 @@ jobs:
     timeout-minutes: 15
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: "20"
 
@@ -151,7 +151,7 @@ jobs:
       - name: Upload to the Security tab
         if: always() && 'true' == 'true'
         continue-on-error: true
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: threatcrush.sarif
           category: threatcrush
@@ -236,7 +236,7 @@ jobs:
 
       - name: Upload SARIF artifact
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: threatcrush-sarif
           path: threatcrush.sarif
@@ -251,7 +251,7 @@ jobs:
       - name: Comment on PR
         if: always() && github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]'
         continue-on-error: true
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs');
diff --git a/action.yml b/action.yml
index 3fa16d9..72f47a1 100644
--- a/action.yml
+++ b/action.yml
@@ -25,5 +25,5 @@ outputs:
   payment_id:
     description: 'CoinPayPortal payment id, when a payment was created.'
 runs:
-  using: 'node20'
+  using: 'node24'
   main: 'dist/index.js'
diff --git a/package.json b/package.json
index e0f1f48..e170bb5 100644
--- a/package.json
+++ b/package.json
@@ -6,7 +6,7 @@
   "type": "module",
   "license": "MIT",
   "engines": {
-    "node": ">=20"
+    "node": ">=24"
   },
   "scripts": {
     "build": "node scripts/build.mjs",
diff --git a/scripts/build.mjs b/scripts/build.mjs
index 2731532..d6aa171 100644
--- a/scripts/build.mjs
+++ b/scripts/build.mjs
@@ -6,7 +6,7 @@ await build({
   entryPoints: ['src/main.ts'],
   bundle: true,
   platform: 'node',
-  target: 'node20',
+  target: 'node24',
   format: 'esm',
   outfile: 'dist/index.js',
   banner: {