diff --git a/.github/workflows/lockfile-audit-fix.yml b/.github/workflows/lockfile-audit-fix.yml
index acbeb068ac..d4d979370c 100644
--- a/.github/workflows/lockfile-audit-fix.yml
+++ b/.github/workflows/lockfile-audit-fix.yml
@@ -49,7 +49,7 @@ jobs:
       - name: Install Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: "24.20.0"
+          node-version: "24.21.0"
 
       - name: Snapshot lockfile before fix
         run: cp pnpm-lock.yaml /tmp/lockfile-before-fix.yaml
diff --git a/.github/workflows/lockfile-audit.yml b/.github/workflows/lockfile-audit.yml
index 2057d1d500..7bd4c2634d 100644
--- a/.github/workflows/lockfile-audit.yml
+++ b/.github/workflows/lockfile-audit.yml
@@ -50,7 +50,7 @@ jobs:
       - name: Install pnpm + Node.js
         uses: pnpm/setup@703c52620218391530e48b9e8870d5c0082e1b9b # v2.1.0
         with:
-          runtime: node@24.20.0
+          runtime: node@24.21.0
           install: false
 
       - name: Determine base commit
@@ -123,7 +123,7 @@ jobs:
       - name: Install Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: "24.20.0"
+          node-version: "24.21.0"
 
       - name: Run tests
         run: node --test .github/scripts/lockfile-audit-fix-normalize.test.mjs