diff --git a/.changeset/bump-node24-actions.md b/.changeset/bump-node24-actions.md
new file mode 100644
index 0000000..38991b4
--- /dev/null
+++ b/.changeset/bump-node24-actions.md
@@ -0,0 +1,13 @@
+---
+"@inoxth/react-native-edot-shared": patch
+"@inoxth/react-native-edot-sdk": patch
+"@inoxth/react-native-edot-navigation": patch
+"@inoxth/react-native-edot-tracer-provider": patch
+---
+
+ci: bump deprecated GitHub Actions to Node 24 supporting versions
+
+No runtime or API changes. Pure CI tooling update so the release
+pipeline keeps working past GitHub's 2026-06-02 Node 24 default
+cutover. Also doubles as the first end-to-end validation of the
+Trusted Publishing + OIDC + provenance attestation flow.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 96e347e..f53824e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,21 +13,21 @@ jobs:
     name: Verify
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: 24
 
       - name: Set up JDK 17
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: corretto
           java-version: "17"
           cache: gradle
 
       - name: Set up Android SDK
-        uses: android-actions/setup-android@v3
+        uses: android-actions/setup-android@v4
 
       - name: Enable Corepack
         run: corepack enable
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f421c73..69a6d53 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,24 +15,24 @@ jobs:
       pull-requests: write
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: 24
           registry-url: https://registry.npmjs.org/
 
       - name: Set up JDK 17
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: corretto
           java-version: "17"
           cache: gradle
 
       - name: Set up Android SDK
-        uses: android-actions/setup-android@v3
+        uses: android-actions/setup-android@v4
 
       - name: Enable Corepack
         run: corepack enable