diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 05969c7377..4238d3d514 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,7 +33,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           cache: pnpm
 
       - name: Install frontend dependencies
@@ -82,7 +82,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           cache: pnpm
 
       - name: Install frontend dependencies
@@ -113,7 +113,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           cache: pnpm
 
       - name: Install frontend dependencies
@@ -154,7 +154,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
 
       - name: GitHub script tests
         env:
@@ -197,7 +197,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           cache: pnpm
 
       - name: Install system dependencies
@@ -356,7 +356,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           cache: pnpm
 
       - name: Install frontend dependencies
@@ -1291,7 +1291,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
       - name: CI planner and gate tests
         run: node --test .github/scripts/ci-*.test.mjs
       - name: Core architecture contracts
@@ -1327,7 +1327,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
       - name: Install packaging tools
         run: |
           sudo apt-get update
diff --git a/.github/workflows/database-environments.yml b/.github/workflows/database-environments.yml
index 87a0166ee1..345becad2e 100644
--- a/.github/workflows/database-environments.yml
+++ b/.github/workflows/database-environments.yml
@@ -42,7 +42,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
 
       - name: Validate database environment tooling
         run: |
diff --git a/.github/workflows/i18n-autofill.yml b/.github/workflows/i18n-autofill.yml
index 11a3f1c5bb..2aaff67bdf 100644
--- a/.github/workflows/i18n-autofill.yml
+++ b/.github/workflows/i18n-autofill.yml
@@ -53,7 +53,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
 
       - name: Autofill missing i18n entries
         env:
diff --git a/.github/workflows/issue-database-label.yml b/.github/workflows/issue-database-label.yml
index 67af992ae0..bfc569c062 100644
--- a/.github/workflows/issue-database-label.yml
+++ b/.github/workflows/issue-database-label.yml
@@ -31,7 +31,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
 
       - name: Triage issue labels and title
         run: node .github/scripts/label-issue-database.mjs
@@ -56,7 +56,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
 
       - name: Synchronize database labels
         run: node .github/scripts/label-issue-database.mjs
diff --git a/.github/workflows/mcp-release.yml b/.github/workflows/mcp-release.yml
index 79e81a52cc..1cca5bc202 100644
--- a/.github/workflows/mcp-release.yml
+++ b/.github/workflows/mcp-release.yml
@@ -35,7 +35,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           registry-url: https://registry.npmjs.org
           cache: pnpm
           cache-dependency-path: pnpm-lock.yaml
@@ -440,7 +440,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           registry-url: https://registry.npmjs.org
 
       - name: Publish platform package
@@ -486,7 +486,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           registry-url: https://registry.npmjs.org
           cache: pnpm
           cache-dependency-path: pnpm-lock.yaml
@@ -689,7 +689,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           registry-url: https://registry.npmjs.org
 
       - name: Sign macOS MCP binary
@@ -791,7 +791,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           registry-url: https://registry.npmjs.org
           cache: pnpm
           cache-dependency-path: pnpm-lock.yaml
@@ -845,7 +845,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           registry-url: https://registry.npmjs.org
 
       - name: Build native release archives from npm packages
@@ -953,7 +953,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           registry-url: https://registry.npmjs.org
 
       - name: Build native CLI release archives from npm packages
diff --git a/.github/workflows/plugin-cli-release.yml b/.github/workflows/plugin-cli-release.yml
index d93e1719d1..1cb0c9835a 100644
--- a/.github/workflows/plugin-cli-release.yml
+++ b/.github/workflows/plugin-cli-release.yml
@@ -43,7 +43,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           registry-url: https://registry.npmjs.org
 
       - uses: dtolnay/rust-toolchain@stable
@@ -329,7 +329,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           registry-url: https://registry.npmjs.org
 
       - name: Publish platform package
@@ -357,7 +357,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           registry-url: https://registry.npmjs.org
 
       - name: Prepare development runtime build dependencies
@@ -412,7 +412,7 @@ jobs:
     steps:
       - uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           registry-url: https://registry.npmjs.org
 
       - uses: dtolnay/rust-toolchain@stable
diff --git a/.github/workflows/pull-request-labels.yml b/.github/workflows/pull-request-labels.yml
index 9a67ecc847..58653c9aa6 100644
--- a/.github/workflows/pull-request-labels.yml
+++ b/.github/workflows/pull-request-labels.yml
@@ -53,7 +53,7 @@ jobs:
         if: steps.verify_head.outputs.stale != 'true'
         uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
 
       - name: Synchronize pull request labels
         if: steps.verify_head.outputs.stale != 'true'
diff --git a/.github/workflows/similar-issues-backfill.yml b/.github/workflows/similar-issues-backfill.yml
index 986e9d057e..2d153cdfc7 100644
--- a/.github/workflows/similar-issues-backfill.yml
+++ b/.github/workflows/similar-issues-backfill.yml
@@ -47,7 +47,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
 
       - name: Backfill similar issue suggestions
         run: node .github/scripts/backfill-similar-issues.mjs
diff --git a/.github/workflows/similar-issues.yml b/.github/workflows/similar-issues.yml
index a25110a49c..7896636f84 100644
--- a/.github/workflows/similar-issues.yml
+++ b/.github/workflows/similar-issues.yml
@@ -31,7 +31,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
 
       - name: Suggest similar issues
         run: node .github/scripts/suggest-similar-issues.mjs
diff --git a/.github/workflows/sqlserver2000-windows-user-test.yml b/.github/workflows/sqlserver2000-windows-user-test.yml
index 1385973b96..d6c5362db3 100644
--- a/.github/workflows/sqlserver2000-windows-user-test.yml
+++ b/.github/workflows/sqlserver2000-windows-user-test.yml
@@ -22,7 +22,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22.13.0
+          node-version: 22.23.3
           cache: pnpm
 
       - name: Setup Java