diff --git a/.github/workflows/repository-integrity.yml b/.github/workflows/repository-integrity.yml
index 8f2aacd..844e749 100644
--- a/.github/workflows/repository-integrity.yml
+++ b/.github/workflows/repository-integrity.yml
@@ -27,7 +27,7 @@ jobs:
       - name: Install Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: '24.20.0'
+          node-version: '24.22.1'
           package-manager-cache: false
 
       - name: Use the locked npm release
@@ -38,7 +38,7 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          test "$(node --version)" = 'v24.20.0'
+          test "$(node --version)" = 'v24.22.1'
           test "$(npm --version)" = '12.0.2'
           npm ci --no-audit --no-fund
           npm test
diff --git a/.node-version b/.node-version
index b7179ae..ce62013 100644
--- a/.node-version
+++ b/.node-version
@@ -1 +1 @@
-24.20.0
+24.22.1
diff --git a/README.md b/README.md
index 4be5a4e..a083a92 100644
--- a/README.md
+++ b/README.md
@@ -8,7 +8,7 @@ PastureStack is an independent community effort to preserve, audit, and moderniz
 
 ## Local validation
 
-The build toolchain is pinned to Node.js 24.20.0 LTS and npm 12.0.2. Use those exact versions so the lockfile, native WOFF2 converter, and generated font artifacts are reproducible.
+The build toolchain is pinned to Node.js 24.22.1 LTS and npm 12.0.2. Use those exact versions so the lockfile, native WOFF2 converter, and generated font artifacts are reproducible.
 
 ```sh
 npm ci
diff --git a/package-lock.json b/package-lock.json
index 3937b72..bbe9bab 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17,7 +17,7 @@
         "ttf2woff2": "8.0.1"
       },
       "engines": {
-        "node": "24.20.0",
+        "node": "24.22.1",
         "npm": "12.0.2"
       }
     },
diff --git a/package.json b/package.json
index 985ec25..c138952 100644
--- a/package.json
+++ b/package.json
@@ -37,13 +37,13 @@
   "license": "SEE LICENSE IN LICENSES/README.md",
   "packageManager": "npm@12.0.2",
   "engines": {
-    "node": "24.20.0",
+    "node": "24.22.1",
     "npm": "12.0.2"
   },
   "devEngines": {
     "runtime": {
       "name": "node",
-      "version": "24.20.0",
+      "version": "24.22.1",
       "onFail": "error"
     },
     "packageManager": {
diff --git a/scripts/audit.mjs b/scripts/audit.mjs
index bfff094..28c9889 100644
--- a/scripts/audit.mjs
+++ b/scripts/audit.mjs
@@ -88,11 +88,11 @@ const packageJson = JSON.parse(await readFile(path.join(root, "package.json"), "
 const packageLock = JSON.parse(await readFile(path.join(root, "package-lock.json"), "utf8"));
 const nodeVersionFile = (await readFile(path.join(root, ".node-version"), "utf8")).trim();
 if (
-  nodeVersionFile !== "24.20.0" ||
+  nodeVersionFile !== "24.22.1" ||
   packageJson.packageManager !== "npm@12.0.2" ||
-  packageJson.engines?.node !== "24.20.0" ||
+  packageJson.engines?.node !== "24.22.1" ||
   packageJson.engines?.npm !== "12.0.2" ||
-  packageJson.devEngines?.runtime?.version !== "24.20.0" ||
+  packageJson.devEngines?.runtime?.version !== "24.22.1" ||
   packageJson.devEngines?.packageManager?.version !== "12.0.2"
 ) {
   throw new Error("The Node.js LTS and npm build toolchain must remain exactly pinned");