diff --git a/.github/workflows/release-checks.yml b/.github/workflows/release-checks.yml
index b23669ac36..6726569406 100644
--- a/.github/workflows/release-checks.yml
+++ b/.github/workflows/release-checks.yml
@@ -19,7 +19,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@65d868f8d4d85d7d4abb7de0875cde3fcc8798f5
         with:
-          node-version: '24.19.0'
+          node-version: '24.22.1'
           package-manager-cache: false
       - name: Test release authorization and recovery
         run: node --test scripts/release/*.test.cjs
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6b49c713d1..e52624f067 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -47,7 +47,7 @@ env:
   RELEASE_REMOVE_DOCUMENTATION_VERSION: ${{ inputs.remove_documentation_version }}
   RELEASE_SOURCE_RUN_ID: ${{ inputs.source_run_id }}
   RELEASE_PUBLISH_ENABLED: ${{ vars.RELEASE_PUBLISH_ENABLED }}
-  RELEASE_DIR: ${{ github.workspace }}/../release-artifacts
+  RELEASE_DIR: /home/runner/work/_temp/release-artifacts
   GH_TOKEN: ${{ github.token }}
 
 jobs:
@@ -71,7 +71,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@65d868f8d4d85d7d4abb7de0875cde3fcc8798f5
         with:
-          node-version: '24.19.0'
+          node-version: '24.22.1'
           package-manager-cache: false
       - name: Check admin authorization
         run: node scripts/release/index.cjs authorize
@@ -117,7 +117,7 @@ jobs:
       - name: Pack and record immutable release inputs
         if: inputs.operation != 'resume'
         run: node scripts/release/index.cjs prepare-artifact
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: inputs.operation != 'resume'
         id: upload
         with:
@@ -144,7 +144,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@65d868f8d4d85d7d4abb7de0875cde3fcc8798f5
         with:
-          node-version: '24.19.0'
+          node-version: '24.22.1'
           package-manager-cache: false
       - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093
         with:
@@ -174,7 +174,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@65d868f8d4d85d7d4abb7de0875cde3fcc8798f5
         with:
-          node-version: '24.19.0'
+          node-version: '24.22.1'
           package-manager-cache: false
       - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093
         with:
@@ -205,7 +205,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@65d868f8d4d85d7d4abb7de0875cde3fcc8798f5
         with:
-          node-version: '24.19.0'
+          node-version: '24.22.1'
           package-manager-cache: false
       - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093
         with:
diff --git a/docs/RELEASING.md b/docs/RELEASING.md
index 4fdc6c5bf1..24b73a0fab 100644
--- a/docs/RELEASING.md
+++ b/docs/RELEASING.md
@@ -47,7 +47,7 @@ enabling publication. Creating or merging the workflow does not configure npm tr
 
 No npm write token is needed in GitHub. `GITHUB_TOKEN` performs repository bookkeeping;
 only the publish job has `id-token: write`. Publishing runs on a GitHub-hosted Ubuntu
-runner. The workflow uses Node 24.19.0, including npm 11.17.0; update this tested pair
+runner. The workflow uses Node 24.22.1, including npm 11.19.1; update this tested pair
 together. Older npm releases can execute `prepare` during `npm pack --ignore-scripts`.
 
 ## Start a release
@@ -146,7 +146,7 @@ state rather than assuming every click is queued indefinitely.
 
 ## Validate changes to the release tooling
 
-With Node 24.19.0 and npm 11.17.0:
+With Node 24.22.1 and npm 11.19.1:
 
 ```sh
 node --test scripts/release/*.test.cjs