diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 66f0f7c..d6f0d1d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -90,7 +90,7 @@ jobs:
 
       - uses: actions/setup-node@v7.0.0
         with:
-          node-version: "24.20.0"
+          node-version: "24.21.0"
 
       # typescript-build.yml packs a tarball to satisfy the version assertion in
       # common-release-assets.yml, and nothing else checks that it does.
diff --git a/.github/workflows/safe-settings.yml b/.github/workflows/safe-settings.yml
index 8be0c5b..86972c7 100644
--- a/.github/workflows/safe-settings.yml
+++ b/.github/workflows/safe-settings.yml
@@ -37,7 +37,7 @@ jobs:
 
       - uses: actions/setup-node@v7.0.0
         with:
-          node-version: "24.20.0"
+          node-version: "24.21.0"
 
       - name: Install dependencies
         run: npm ci
diff --git a/.github/workflows/typescript-publish-to-npm.yml b/.github/workflows/typescript-publish-to-npm.yml
index d23d143..f9b4c5a 100644
--- a/.github/workflows/typescript-publish-to-npm.yml
+++ b/.github/workflows/typescript-publish-to-npm.yml
@@ -70,7 +70,7 @@ jobs:
 
       - uses: actions/setup-node@v7.0.0
         with:
-          node-version: 24.20.0
+          node-version: 24.21.0
           registry-url: https://registry.npmjs.org
           scope: ${{ inputs.scope }}
 
diff --git a/.github/workflows/typescript-publish-to-vscode.yml b/.github/workflows/typescript-publish-to-vscode.yml
index 97501f0..344e7d6 100644
--- a/.github/workflows/typescript-publish-to-vscode.yml
+++ b/.github/workflows/typescript-publish-to-vscode.yml
@@ -84,7 +84,7 @@ jobs:
 
       - uses: actions/setup-node@v7.0.0
         with:
-          node-version: 24.20.0
+          node-version: 24.21.0
 
       - run: npm ci