diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 697d01c..0e1d073 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -7,13 +7,13 @@ permissions:
 
 jobs:
   build:
-    runs-on: macos-latest
+    runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
-    - name: Use Node.js 20.x
+    - uses: actions/checkout@v6
+    - name: Use Node.js 24.x
       uses: actions/setup-node@v6
       with:
-        node-version: 20.x
+        node-version: 24.x
     - name: npm install, build, and test
       run: |
         npm install
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 235969d..f8b4791 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -6,15 +6,16 @@ on:
 
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   publish-npm:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
           registry-url: https://registry.npmjs.org/
           cache: npm
       - run: npm ci
@@ -22,6 +23,4 @@ jobs:
       - run: npm version ${TAG_NAME} --git-tag-version=false
         env:
           TAG_NAME: ${{ github.event.release.tag_name }}
-      - run: npm whoami; npm --ignore-scripts publish
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.npm_token}}
+      - run: npm --ignore-scripts publish --provenance
diff --git a/karma.config.cjs b/karma.config.cjs
index 8d01a0f..7d5a61a 100644
--- a/karma.config.cjs
+++ b/karma.config.cjs
@@ -11,7 +11,13 @@ module.exports = function (config) {
     port: 9876,
     colors: true,
     logLevel: config.LOG_INFO,
-    browsers: ['ChromeHeadless'],
+    browsers: ['ChromeHeadlessNoSandbox'],
+    customLaunchers: {
+      ChromeHeadlessNoSandbox: {
+        base: 'ChromeHeadless',
+        flags: ['--no-sandbox']
+      }
+    },
     autoWatch: false,
     singleRun: true,
     concurrency: Infinity