diff --git a/.github/workflows/build-binaries.yaml b/.github/workflows/build-binaries.yaml
index 2928e57995..e69cc89aab 100644
--- a/.github/workflows/build-binaries.yaml
+++ b/.github/workflows/build-binaries.yaml
@@ -41,6 +41,7 @@ jobs:
         uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1
         with:
           node-version-file: package.json
+          check-latest: true
 
       - name: JS Dependency Cache
         id: js-cache
diff --git a/.github/workflows/goreleaser-snapshot-fleet.yaml b/.github/workflows/goreleaser-snapshot-fleet.yaml
index 19b20c6aeb..f24693ae5d 100644
--- a/.github/workflows/goreleaser-snapshot-fleet.yaml
+++ b/.github/workflows/goreleaser-snapshot-fleet.yaml
@@ -64,6 +64,7 @@ jobs:
         uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1
         with:
           node-version-file: package.json
+          check-latest: true
 
       - name: Install Dependencies
         run: make deps
diff --git a/docs/Contributing/getting-started/building-fleet.md b/docs/Contributing/getting-started/building-fleet.md
index d5066a3172..767556812b 100644
--- a/docs/Contributing/getting-started/building-fleet.md
+++ b/docs/Contributing/getting-started/building-fleet.md
@@ -36,9 +36,9 @@ Install dependencies:
 sudo apt-get install -y git golang make nodejs npm
 sudo npm install -g yarn
 # Install nvm to manage node versions (apt very out of date) https://github.com/nvm-sh/nvm#install--update-script
-curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.5/install.sh | bash
+curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.3/install.sh | bash
 # refresh your session before continuing
-nvm install v20.18.1
+nvm install v24.10.0
 ```
 
 #### Windows
@@ -74,7 +74,7 @@ The binaries are now available in `./build/`.
 To set up a working local development environment, you must have the following toolset:
 
 * [Go](https://golang.org/doc/install)
-* [Node.js v20.18.1](https://nodejs.org/en/blog/release/v20.18.1) and [Yarn](https://yarnpkg.com/en/docs/install)
+* [Node.js v24.10.0](https://nodejs.org/en/blog/release/v24.10.0) and [Yarn](https://yarnpkg.com/en/docs/install)
   * A specific version of Node.js can be installed using [nvm](https://github.com/nvm-sh/nvm#install--update-script)
 * [GNU Make](https://www.gnu.org/software/make/) (probably already installed if you're on macOS/Linux)
 
diff --git a/docs/Contributing/workflows/upgrading-nodejs-version.md b/docs/Contributing/workflows/upgrading-nodejs-version.md
new file mode 100644
index 0000000000..46bac08f4e
--- /dev/null
+++ b/docs/Contributing/workflows/upgrading-nodejs-version.md
@@ -0,0 +1,95 @@
+# Upgrading the Node.js version used to build Fleet
+
+## How Node.js releases work
+
+> Major Node.js versions enter Current release status for six months, which gives library authors time to add support for them. After six months, odd-numbered releases (9, 11, etc.) become unsupported, and even-numbered releases (10, 12, etc.) move to Active LTS status and are ready for general use. LTS release status is "long-term support", which typically guarantees that critical bugs will be fixed for a total of 30 months. Production applications should only use Active LTS or Maintenance LTS releases.
+
+The Node.js project maintains a [release schedule](https://nodejs.org/en/about/releases/) on the Node.js site, and more detailed information can be found [on Github](https://github.com/nodejs/release?tab=readme-ov-file#release-schedule).
+
+## Updating Node.js locally
+
+### Using `asdf`
+
+If you're using `asdf`, you can install the new version of Node.js using `asdf install` and set it as the default for the project using `asdf set`. For example, to upgrade to Node.js 24.10.0, you would run:
+
+```shell
+$ asdf install nodejs 24.10.0
+$ asdf set nodejs 24.10.0
+```
+
+Verify that the new version is set as the default by running any of the following commands:
+
+```shell
+$ asdf current nodejs
+$ node --version
+$ cat .tool-versions | grep nodejs
+```
+
+### Using `nvm`
+
+If you're using `nvm`, you can install the new version of Node.js using `nvm install` and set it as the global default using `nvm alias default`. For example, to upgrade to Node.js 24.10.0, you would run:
+
+```shell
+$ nvm install 24.10.0
+$ nvm alias default 24.10.0
+```
+
+### Update `package.json`
+
+Update the project's `package.json` file's `"engines"` key to include the new version of Node.js. Be sure to include the `^` in front of the version number to pin it to the major version. For example, to upgrade to Node.js 24.10.0, the `package.json` file would look like:
+
+```jsonc
+{
+  "engines": {
+    "node": "^24.10.0"
+  }
+}
+```
+
+#### Update `npm`, install `yarn`
+
+Get any updates for `npm` using `npm i -g npm`. Then, install `yarn` using `npm i -g yarn`. You can check the versions with `npm --version` and `yarn --version`, respectively.
+
+## Updating build scripts
+
+In CI, Fleet uses `actions/setup-node` to select the Node.js version. We configure it to read from the repository root `package.json` using `node-version-file: package.json` so it respects the `engines.node` semver range.
+
+### What `check-latest` does
+
+When `check-latest: true` is set on `actions/setup-node`:
+- The action resolves the latest available Node.js version that satisfies the provided version or range (for example, the newest `24.x` satisfying `^24.10.0`).
+- If a runner already has an older patch/minor of that major cached, `check-latest` tells the action to ignore that stale cache and fetch the newer matching version instead.
+- This helps ensure CI picks up new Node.js patch releases (including security fixes) automatically, without changing your `package.json`.
+
+#### Important notes:
+
+- If you specify an exact version (e.g., `24.10.0`), `check-latest` has no effect; the exact version will be used.
+- With a semver range (e.g., `^24.10.0`), `check-latest` may increase setup time on the first run after a new patch is released because it downloads that newer version. Subsequent runs benefit from cache.
+- This option is supported in `actions/setup-node` v3 and later.
+
+In this repository, `check-latest: true` is set where the main Fleet app is built and published:
+- `.github/workflows/build-binaries.yaml`
+- `.github/workflows/goreleaser-snapshot-fleet.yaml`
+
+For more details, see the `actions/setup-node` documentation: https://github.com/actions/setup-node
+
+## Testing the upgrade
+
+### Testing locally
+
+1. Install dependencies via `yarn install`
+2. Run tests and linter to verify that everything is working as expected:
+   - `yarn test` and `yarn lint`, or
+   - `make test-js` and `make lint-js`
+3. Test `make generate-js` and `make generate-dev`
+4. Test full `make-build` and `make-serve`
+5. Resolve any issues that arise.
+
+### Testing in Github Actions
+
+1. Create a draft pull request from your branch and verify that builds and tests pass in Github Actions.
+2. Resolve any issues that arise.
+
+## Updating this guide
+
+As the Fleet project evolves, new areas may need to be touched when upgrading Node.js versions. Please update this guide with any new files you find that need changing (and remove any files that are no longer relevant).
\ No newline at end of file
diff --git a/package.json b/package.json
index 07ed458f30..34e087e5e4 100644
--- a/package.json
+++ b/package.json
@@ -3,7 +3,7 @@
   "version": "0.99.99",
   "description": "The premier osquery fleet manager.",
   "engines": {
-    "node": "20.18.1",
+    "node": "^24.10.0",
     "yarn": ">=1.22.21"
   },
   "private": true,
@@ -185,4 +185,4 @@
   ],
   "license": "SEE LICENSE IN ./LICENSE",
   "packageManager": "yarn@1.22.22+sha1.ac34549e6aa8e7ead463a7407e1c7390f61a6610"
-}
\ No newline at end of file
+}
diff --git a/tools/tuf/releaser.sh b/tools/tuf/releaser.sh
index f9b5d5514a..7853776900 100755
--- a/tools/tuf/releaser.sh
+++ b/tools/tuf/releaser.sh
@@ -426,11 +426,18 @@ elif [[ $ACTION == "release-to-production" ]]; then
 elif [[ $ACTION == "create-fleetd-release-pr" ]]; then
     create_fleetd_release_pr
 elif [[ $ACTION == "update-osquery-schema" ]]; then
-    NODE_VERSION=$(node --version)
-    EXPECTED_NODE_VERSION=$(cat package.json | jq -r .engines.node)
-    if [[ $NODE_VERSION != "v${EXPECTED_NODE_VERSION}" ]]; then
-        echo "Seems your node version is $NODE_VERSION, version must be v${EXPECTED_NODE_VERSION} to generate schemas..."
-        exit 1
+    # Strip leading 'v' from `node --version` and get major
+    NODE_VERSION=$(node --version | sed 's/^v//')
+    NODE_MAJOR=${NODE_VERSION%%.*}
+
+    EXPECTED_NODE_RANGE=$(jq -r '.engines.node' package.json)
+    # Extract the first numeric sequence (major) from the range, e.g., 24 from "^24.10.0"
+    EXPECTED_MAJOR=$(echo "$EXPECTED_NODE_RANGE" | sed -E 's/^[^0-9]*([0-9]+).*/\1/')
+
+    if [[ "$NODE_MAJOR" != "$EXPECTED_MAJOR" ]]; then
+      echo "Your Node.js $NODE_VERSION does not satisfy engines.node ($EXPECTED_NODE_RANGE)."
+      echo "Please use Node $EXPECTED_MAJOR.x (e.g., 24.10.0)."
+      exit 1
     fi
     update_osquery_schema_and_flags "$VERSION"
 else