diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 68e5e03..c2a1df4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -90,7 +90,7 @@ jobs:
 
       - uses: actions/setup-node@v7.1.0
         with:
-          node-version: "24.22.2"
+          node-version: "26.12.1"
 
       # typescript-build.yml packs a tarball to satisfy the version assertion in
       # common-release-assets.yml, and nothing else checks that it does.
diff --git a/.github/workflows/safe-settings.yml b/.github/workflows/safe-settings.yml
index e494d67..fd9ceff 100644
--- a/.github/workflows/safe-settings.yml
+++ b/.github/workflows/safe-settings.yml
@@ -39,7 +39,7 @@ jobs:
 
       - uses: actions/setup-node@v7.1.0
         with:
-          node-version: "24.22.2"
+          node-version: "26.12.1"
 
       - name: Install dependencies
         run: npm ci
diff --git a/.github/workflows/typescript-publish-to-npm.yml b/.github/workflows/typescript-publish-to-npm.yml
index 31566f6..927294f 100644
--- a/.github/workflows/typescript-publish-to-npm.yml
+++ b/.github/workflows/typescript-publish-to-npm.yml
@@ -70,7 +70,7 @@ jobs:
 
       - uses: actions/setup-node@v7.1.0
         with:
-          node-version: 24.22.2
+          node-version: 26.12.1
           registry-url: https://registry.npmjs.org
           scope: ${{ inputs.scope }}
 
diff --git a/.github/workflows/typescript-publish-to-vscode.yml b/.github/workflows/typescript-publish-to-vscode.yml
index bd0c438..055fefd 100644
--- a/.github/workflows/typescript-publish-to-vscode.yml
+++ b/.github/workflows/typescript-publish-to-vscode.yml
@@ -84,7 +84,7 @@ jobs:
 
       - uses: actions/setup-node@v7.1.0
         with:
-          node-version: 24.22.2
+          node-version: 26.12.1
 
       - run: npm ci