diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 531a301f..6a9f786f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,6 +11,7 @@ on:
 
 jobs:
   build:
+    name: build (${{ matrix.node-line }})
 
     runs-on: ubuntu-latest
 
@@ -25,7 +26,12 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node-version: [22.x, 24.x]
+        # October 21, 2026 security floors; retain newer fixes within each major.
+        include:
+          - node-line: 22.x
+            node-version: '^22.23.4'
+          - node-line: 24.x
+            node-version: '^24.22.1'
 
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -33,6 +39,10 @@ jobs:
       uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
       with:
         node-version: ${{ matrix.node-version }}
+        check-latest: true
+    - name: Report selected Node.js runtime
+      run: |
+        node -p "JSON.stringify({ executable: process.execPath, versions: process.versions })"
     - run: npm install
     - name: Use the runner's pre-installed Chrome for Puppeteer
       run: |