diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml
index 21e1d06..ddd2837 100644
--- a/.github/workflows/build-test.yml
+++ b/.github/workflows/build-test.yml
@@ -7,6 +7,9 @@ on:
     - cron: '0 1 * * FRI'
   workflow_dispatch:
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 jobs:
   build_and_test:
     name: '${{ matrix.os }}: build and test'
@@ -19,12 +22,12 @@ jobs:
     env:
       VCPKG_ROOT:
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         submodules: true
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
       with:
-        node-version: '20.x'
+        node-version: '24.x'
       # How to consume GitHub packages, from this message (!): https://github.community/t/download-from-github-package-registry-without-authentication/14407/35
       # Inspired from here: https://github.com/jcansdale-test/npmrc-configurations/blob/master/.github/workflows/blank.yml
     - name: Authenticate to GitHub Packages
@@ -38,7 +41,7 @@ jobs:
     - run: npm run pack
     - run: npm run test
     - name: Coveralls
-      uses: coverallsapp/github-action@master
+      uses: coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e # v2.3.7
       with:
         github-token: ${{ secrets.GITHUB_TOKEN }}
         parallel: true
@@ -58,7 +61,7 @@ jobs:
       VCPKG_ROOT:
     steps:
     - name: checkout this action
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         submodules: true
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index d6b0abc..30ec2e4 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -25,19 +25,21 @@ jobs:
       matrix:
         language: [ 'javascript' ]
 
+    env:
+      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
       with:
         languages: ${{ matrix.language }}
 
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
       with:
-        node-version: '20.x'
+        node-version: '24.x'
     - name: Authenticate to GitHub Packages
       run: |
         echo "//npm.pkg.github.com/:_authToken=${{ secrets.GITHUB_TOKEN }}" > ~/.npmrc
@@ -48,6 +50,6 @@ jobs:
         npm run pack
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
       with:
         category: "/language:${{matrix.language}}"
diff --git a/__tests__/unit.test.ts b/__tests__/unit.test.ts
index 4a83188..63cd9b7 100644
--- a/__tests__/unit.test.ts
+++ b/__tests__/unit.test.ts
@@ -1,4 +1,4 @@
-// Copyright (c) 2019-2020-2021-2022-2023 Luca Cappa
+// Copyright (c) 2019-2020-2021-2023-2024-2025-2026 Luca Cappa
 // Released under the term specified in file LICENSE.txt
 // SPDX short identifier: MIT
 
diff --git a/action.yml b/action.yml
index 496a809..5aa2dd6 100644
--- a/action.yml
+++ b/action.yml
@@ -85,7 +85,7 @@ inputs:
     description: "Specify the command line to dump the environment variables with the 'vcpkg env' command. This command is only used when setting up the environment for MSVC on Windows."
 
 runs:
-  using: 'node20'
+  using: 'node24'
   main: './dist/index.js'
 
 branding:
diff --git a/dist/index.js b/dist/index.js
index 348bbd5..d41ec75 100644
--- a/dist/index.js
+++ b/dist/index.js
@@ -6,7 +6,7 @@
 
 "use strict";
 
-// Copyright (c) 2019-2020-2021-2022-2023-2024 Luca Cappa
+// Copyright (c) 2019-2020-2021-2023-2024-2025-2026 Luca Cappa
 // Released under the term specified in file LICENSE.txt
 // SPDX short identifier: MIT
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
@@ -55698,7 +55698,7 @@ var __webpack_exports__ = {};
 "use strict";
 var exports = __webpack_exports__;
 
-// Copyright (c) 2019-2020-2021-2022-2023 Luca Cappa
+// Copyright (c) 2019-2020-2021-2023-2024-2025-2026 Luca Cappa
 // Released under the term specified in file LICENSE.txt
 // SPDX short identifier: MIT
 Object.defineProperty(exports, "__esModule", ({ value: true }));
diff --git a/src/action.ts b/src/action.ts
index c30a198..b33639d 100644
--- a/src/action.ts
+++ b/src/action.ts
@@ -1,4 +1,4 @@
-// Copyright (c) 2019-2020-2021-2022-2023 Luca Cappa
+// Copyright (c) 2019-2020-2021-2023-2024-2025-2026 Luca Cappa
 // Released under the term specified in file LICENSE.txt
 // SPDX short identifier: MIT
 
diff --git a/src/cmake-action.ts b/src/cmake-action.ts
index ecbd6ae..b032a25 100644
--- a/src/cmake-action.ts
+++ b/src/cmake-action.ts
@@ -1,4 +1,4 @@
-// Copyright (c) 2019-2020-2021-2022-2023 Luca Cappa
+// Copyright (c) 2019-2020-2021-2023-2024-2025-2026 Luca Cappa
 // Released under the term specified in file LICENSE.txt
 // SPDX short identifier: MIT