diff --git a/.github/workflows/node-aught.yml b/.github/workflows/node-aught.yml
index 4213896..ad15385 100644
--- a/.github/workflows/node-aught.yml
+++ b/.github/workflows/node-aught.yml
@@ -2,6 +2,9 @@ name: 'Tests: node.js < 10'
 
 on: [pull_request, push]
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     uses: ljharb/actions/.github/workflows/node.yml@main
@@ -9,3 +12,10 @@ jobs:
       range: '< 10'
       type: minors
       command: npm run tests-only
+
+  node:
+    name: 'node < 10'
+    needs: [tests]
+    runs-on: ubuntu-latest
+    steps:
+      - run: true
diff --git a/.github/workflows/node-pretest.yml b/.github/workflows/node-pretest.yml
index 765edf7..88d49f9 100644
--- a/.github/workflows/node-pretest.yml
+++ b/.github/workflows/node-pretest.yml
@@ -2,6 +2,9 @@ name: 'Tests: pretest/posttest'
 
 on: [pull_request, push]
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     uses: ljharb/actions/.github/workflows/pretest.yml@main
diff --git a/.github/workflows/node-tens.yml b/.github/workflows/node-tens.yml
index 1f55be0..6b71d59 100644
--- a/.github/workflows/node-tens.yml
+++ b/.github/workflows/node-tens.yml
@@ -1,11 +1,21 @@
-name: 'Tests: node.js >= 10'
+name: 'Tests: node.js 10 - 20'
 
 on: [pull_request, push]
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     uses: ljharb/actions/.github/workflows/node.yml@main
     with:
-      range: '>= 10'
+      range: '>= 10 < 20'
       type: minors
       command: npm run tests-only
+
+  node:
+    name: 'node 10 - 20'
+    needs: [tests]
+    runs-on: ubuntu-latest
+    steps:
+      - run: true
diff --git a/.github/workflows/node-twenties.yml b/.github/workflows/node-twenties.yml
new file mode 100644
index 0000000..66c9382
--- /dev/null
+++ b/.github/workflows/node-twenties.yml
@@ -0,0 +1,21 @@
+name: 'Tests: node.js >= 20'
+
+on: [pull_request, push]
+
+permissions:
+  contents: read
+
+jobs:
+  tests:
+    uses: ljharb/actions/.github/workflows/node.yml@main
+    with:
+      range: '>= 20'
+      type: minors
+      command: npm run tests-only
+
+  node:
+    name: 'node >= 20'
+    needs: [tests]
+    runs-on: ubuntu-latest
+    steps:
+      - run: true
diff --git a/.github/workflows/rebase.yml b/.github/workflows/rebase.yml
index b9e1712..1c4b85b 100644
--- a/.github/workflows/rebase.yml
+++ b/.github/workflows/rebase.yml
@@ -2,6 +2,10 @@ name: Automatic Rebase
 
 on: [pull_request_target]
 
+permissions:
+  contents: write  # for ljharb/rebase to push code to rebase
+  pull-requests: read  # for ljharb/rebase to get info about PR
+
 jobs:
   _:
     uses: ljharb/actions/.github/workflows/rebase.yml@main
diff --git a/.github/workflows/require-allow-edits.yml b/.github/workflows/require-allow-edits.yml
index 7b842f8..f25870d 100644
--- a/.github/workflows/require-allow-edits.yml
+++ b/.github/workflows/require-allow-edits.yml
@@ -2,8 +2,16 @@ name: Require “Allow Edits”
 
 on: [pull_request_target]
 
+permissions:
+  contents: read
+
+cache-mode: none
+
 jobs:
   _:
+    permissions:
+      pull-requests: read  # for ljharb/require-allow-edits to check 'allow edits' on PR
+
     name: "Require “Allow Edits”"
 
     runs-on: ubuntu-latest
diff --git a/implementation.js b/implementation.js
index 74d93cf..f7d3dfe 100644
--- a/implementation.js
+++ b/implementation.js
@@ -2,10 +2,10 @@
 
 'use strict';
 
-var callBound = require('call-bind/callBound');
-var RequireObjectCoercible = require('es-abstract/2024/RequireObjectCoercible');
-var ToString = require('es-abstract/2024/ToString');
-var ToIntegerOrInfinity = require('es-abstract/2024/ToIntegerOrInfinity');
+var callBound = require('call-bound');
+var RequireObjectCoercible = require('es-abstract/2025/RequireObjectCoercible');
+var ToString = require('es-abstract/2025/ToString');
+var ToIntegerOrInfinity = require('es-abstract/2025/ToIntegerOrInfinity');
 var StringCharCodeAt = callBound('String.prototype.charCodeAt');
 
 module.exports = function codePointAt(position) {
diff --git a/package.json b/package.json
index 0a6cb32..4a13ba9 100644
--- a/package.json
+++ b/package.json
@@ -38,19 +38,18 @@
 		"posttest": "npx npm@'>=10.2' audit --production"
 	},
 	"dependencies": {
-		"call-bind": "^1.0.7",
-		"es-abstract": "^1.23.3"
+		"call-bound": "^1.0.4",
+		"define-properties": "^1.2.1",
+		"es-abstract": "^1.24.2"
 	},
 	"devDependencies": {
 		"@es-shims/api": "^2.5.1",
-		"@ljharb/eslint-config": "^21.1.1",
-		"define-properties": "^1.2.1",
-		"eslint": "=8.8.0",
-		"function-bind": "^1.1.2",
+		"@ljharb/eslint-config": "^22.2.4",
+		"call-bind": "^1.0.9",
+		"eslint": "^8.57.1",
 		"functions-have-names": "^1.2.3",
-		"has-strict-mode": "^1.0.1",
-		"istanbul": "^0.4.5",
-		"tape": "^5.9.0"
+		"has-strict-mode": "^1.1.0",
+		"tape": "^5.10.2"
 	},
 	"directories": {
 		"test": "tests"