diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml
index e47235a9..27918f1b 100644
--- a/.github/workflows/node.js.yml
+++ b/.github/workflows/node.js.yml
@@ -6,20 +6,23 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions: {}
+
 jobs:
   build:
-
     runs-on: ubuntu-latest
 
     strategy:
       matrix:
-        node-version: [18.x]
+        node-version: [22.x]
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
       - run: npm ci
diff --git a/build/pipeline.yml b/build/pipeline.yml
index f14c17ea..e68924e0 100644
--- a/build/pipeline.yml
+++ b/build/pipeline.yml
@@ -48,13 +48,13 @@ extends:
         testPlatforms:
           - name: Linux
             nodeVersions:
-              - 18.x
+              - 22.x
           - name: MacOS
             nodeVersions:
-              - 18.x
+              - 22.x
           - name: Windows
             nodeVersions:
-              - 18.x
+              - 22.x
 
         testSteps:
           - script: npm ci