diff --git a/CHANGES.md b/CHANGES.md
index 6402694..39d5d3a 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -9,6 +9,6 @@ PastureStack has modified this Apache-2.0-licensed work as follows:
 - renamed the project-brand glyph to `pasture-stack` (`icon-pasture-stack` in CSS);
 - renamed the font family, generated files, package metadata, and demo branding;
 - replaced the historical release tooling with a reproducible local build and audit workflow.
-- pinned the build to Node.js 24.19.0 LTS and npm 12.0.2, added registry, integrity, lifecycle-script, and dependency-vulnerability gates.
+- pinned the build to Node.js 24.20.0 LTS and npm 12.0.2, added registry, integrity, lifecycle-script, and dependency-vulnerability gates.
 
 These changes do not claim authorship of the compatibility API or Lucide/Feather artwork. The existing root `LICENSE`, the Lucide/Feather notices under `LICENSES/`, and the contributor acknowledgment in `UPSTREAM_ATTRIBUTION.md` are retained. The GitHub fork preserves the upstream history unchanged; this notice describes only the PastureStack integration commit and its current tree.
diff --git a/PROVENANCE.md b/PROVENANCE.md
index ed053c3..7efd9fa 100644
--- a/PROVENANCE.md
+++ b/PROVENANCE.md
@@ -21,7 +21,7 @@ Product-like legacy compatibility aliases map to neutral Lucide symbols. No Appl
 
 ## Build toolchain and dependency integrity
 
-- Runtime: Node.js 24.19.0 LTS
+- Runtime: Node.js 24.20.0 LTS
 - Package manager: npm 12.0.2
 - Lock format: npm lockfile version 3
 - Registry allowlist: `registry.npmjs.org`
diff --git a/README.md b/README.md
index 27d2465..4be5a4e 100644
--- a/README.md
+++ b/README.md
@@ -8,7 +8,7 @@ PastureStack is an independent community effort to preserve, audit, and moderniz
 
 ## Local validation
 
-The build toolchain is pinned to Node.js 24.19.0 LTS and npm 12.0.2. Use those exact versions so the lockfile, native WOFF2 converter, and generated font artifacts are reproducible.
+The build toolchain is pinned to Node.js 24.20.0 LTS and npm 12.0.2. Use those exact versions so the lockfile, native WOFF2 converter, and generated font artifacts are reproducible.
 
 ```sh
 npm ci
diff --git a/package-lock.json b/package-lock.json
index 30c7734..b303691 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17,7 +17,7 @@
         "ttf2woff2": "8.0.1"
       },
       "engines": {
-        "node": "24.19.0",
+        "node": "24.20.0",
         "npm": "12.0.2"
       }
     },
diff --git a/package.json b/package.json
index 323fabd..985ec25 100644
--- a/package.json
+++ b/package.json
@@ -37,13 +37,13 @@
   "license": "SEE LICENSE IN LICENSES/README.md",
   "packageManager": "npm@12.0.2",
   "engines": {
-    "node": "24.19.0",
+    "node": "24.20.0",
     "npm": "12.0.2"
   },
   "devEngines": {
     "runtime": {
       "name": "node",
-      "version": "24.19.0",
+      "version": "24.20.0",
       "onFail": "error"
     },
     "packageManager": {
diff --git a/scripts/audit.mjs b/scripts/audit.mjs
index 3b694e2..4f284e8 100644
--- a/scripts/audit.mjs
+++ b/scripts/audit.mjs
@@ -84,9 +84,9 @@ const packageJson = JSON.parse(await readFile(path.join(root, "package.json"), "
 const packageLock = JSON.parse(await readFile(path.join(root, "package-lock.json"), "utf8"));
 if (
   packageJson.packageManager !== "npm@12.0.2" ||
-  packageJson.engines?.node !== "24.19.0" ||
+  packageJson.engines?.node !== "24.20.0" ||
   packageJson.engines?.npm !== "12.0.2" ||
-  packageJson.devEngines?.runtime?.version !== "24.19.0" ||
+  packageJson.devEngines?.runtime?.version !== "24.20.0" ||
   packageJson.devEngines?.packageManager?.version !== "12.0.2"
 ) {
   throw new Error("The Node.js LTS and npm build toolchain must remain exactly pinned");