diff --git a/.github/workflows/deploy-website.yml b/.github/workflows/deploy-website.yml
index 25bf13c..69b7485 100644
--- a/.github/workflows/deploy-website.yml
+++ b/.github/workflows/deploy-website.yml
@@ -20,10 +20,10 @@ jobs:
     steps:
       - uses: actions/checkout@v6.0.2
 
-      - name: Use Node.js 20.x
+      - name: Use Node.js 24.x
         uses: actions/setup-node@v6
         with:
-          node-version: 20.x
+          node-version: 24.x
           cache: npm
 
       - name: Install root dependencies
diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml
index c6cf9ec..0918ba3 100644
--- a/.github/workflows/node.js.yml
+++ b/.github/workflows/node.js.yml
@@ -14,18 +14,20 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v6.0.2
-    - name: Use Node.js 20.x
+    - name: Use Node.js 24.x
       uses: actions/setup-node@v6
       with:
-        node-version: 20.x
+        node-version: 24.x
         cache: 'npm'
     - run: npm ci
     - run: npm run ci
+    # Only publish from pushes to main. On pull_request runs github.sha is an
+    # ephemeral merge commit, so publishing there tags a commit that is on no branch.
     - name: Publish to NPM if version in package.json has changed
       id: publish
+      if: github.event_name == 'push'
       uses: JS-DevTools/npm-publish@v4
       with:
-        token: ${{ secrets.NPM_TOKEN }}
         provenance: true
     - name: Create tag
       if: steps.publish.outputs.type
diff --git a/package.json b/package.json
index 8ac6780..bd28a65 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "maquette",
-  "version": "4.1.4",
+  "version": "4.1.5",
   "type": "module",
   "description": "Minimalistic Virtual DOM implementation with support for animated transitions.",
   "workspaces": [