diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4afc8047..05f4fea1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,7 +30,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-node@v7
         with:
-          node-version: 24.22.2
+          node-version: 26.13.0
           cache: yarn
       - run: corepack enable
       - run: yarn install --frozen-lockfile
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0aa06172..9d2c0714 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
       - uses: docker/setup-buildx-action@v4
       - uses: actions/setup-node@v7
         with:
-          node-version: 24.22.2
+          node-version: 26.13.0
           cache: yarn
       - run: corepack enable
       - run: yarn install --frozen-lockfile
diff --git a/.github/workflows/scip.yml b/.github/workflows/scip.yml
index 760039aa..1a7cc3f4 100644
--- a/.github/workflows/scip.yml
+++ b/.github/workflows/scip.yml
@@ -11,7 +11,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-node@v7
         with:
-          node-version: 24.22.2
+          node-version: 26.13.0
           cache: yarn
       - run: corepack enable
       - run: yarn install --frozen-lockfile
diff --git a/.tool-versions b/.tool-versions
index 887276c9..31ca3ff5 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1,3 +1,3 @@
-nodejs 24.22.2
+nodejs 26.13.0
 pnpm 12.16.1
 yarn 1.22.22
diff --git a/Dockerfile b/Dockerfile
index 4579827d..e409d205 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,7 +15,7 @@
 #
 # Keep the tag and digest inline in FROM: Renovate can't update a digest that
 # is split across an ARG and FROM.
-FROM node:24.22.2-slim@sha256:c86ecead9e55a5210ac1727de38a4ca840bf03dcaf34dc9749addbf383b1920c
+FROM node:26.13.0-slim@sha256:5adad64f9a1fca2d51972caa65983634c8a774eb300d72b20f7f2a0f60368072
 
 # --use-openssl-ca makes Node (and npm/yarn/pnpm) trust the Debian CA store
 # instead of the CA list compiled into each Node binary. This also covers older
diff --git a/package.json b/package.json
index 1b2cb1dc..8990be9d 100644
--- a/package.json
+++ b/package.json
@@ -28,7 +28,7 @@
   "author": "Code Intelligence at Sourcegraph",
   "license": "Apache-2.0",
   "engines": {
-    "node": ">=22.23.4"
+    "node": ">=26.13.0"
   },
   "packageManager": "yarn@1.22.22",
   "bugs": {
@@ -47,7 +47,7 @@
   "devDependencies": {
     "@eslint/js": "10.0.1",
     "@types/google-protobuf": "3.15.12",
-    "@types/node": "24.19.2",
+    "@types/node": "26.6.6",
     "@types/progress": "2.0.7",
     "diff": "9.0.0",
     "eslint": "10.14.0",
diff --git a/yarn.lock b/yarn.lock
index 8fd5397d..f384d7ce 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -376,12 +376,12 @@
   resolved "https://registry.yarnpkg.com/@types/json-schema/-/json-schema-7.0.15.tgz#596a1747233694d50f6ad8a7869fcb6f56cf5841"
   integrity sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==
 
-"@types/node@*", "@types/node@24.19.2":
-  version "24.19.2"
-  resolved "https://registry.yarnpkg.com/@types/node/-/node-24.19.2.tgz#8718eedbc0f89648de6525be9f4a9c61cdbaa502"
-  integrity sha512-93d49wCWJkCyN87MxLpNN6KXPCwFw7bVUg79mGUV1OS40JGWwVCr8n61DXCSqz7CV6/VfPkb7xec7uP2M+QHWQ==
+"@types/node@*", "@types/node@26.6.6":
+  version "26.6.6"
+  resolved "https://registry.yarnpkg.com/@types/node/-/node-26.6.6.tgz#9ed7b5817e728ed9216ef7c5b7d373fe3b777104"
+  integrity sha512-MzQj+8Kx3XI40OmUAE6Qoh58ZMNstNNMwn2nfd3qWsfe7nDNSqJNzes4njhz6AHwrSHOffSLwXU6yb474Q4aog==
   dependencies:
-    undici-types ">=7.24.0 <7.24.7"
+    undici-types "~8.9.0"
 
 "@types/progress@2.0.7":
   version "2.0.7"
@@ -1116,10 +1116,10 @@ typescript@^6.0.3:
   resolved "https://registry.yarnpkg.com/typescript/-/typescript-6.0.3.tgz#90251dc007916e972786cb94d74d15b185577d21"
   integrity sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw==
 
-"undici-types@>=7.24.0 <7.24.7":
-  version "7.24.6"
-  resolved "https://registry.yarnpkg.com/undici-types/-/undici-types-7.24.6.tgz#61275b485d7fd4e9d269c7cf04ec2873c9cc0f91"
-  integrity sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==
+undici-types@~8.9.0:
+  version "8.9.0"
+  resolved "https://registry.yarnpkg.com/undici-types/-/undici-types-8.9.0.tgz#e240d97c8b5d85e5347ce73d25865c7906c1ec9f"
+  integrity sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg==
 
 uri-js@^4.2.2:
   version "4.4.1"