diff --git a/.github/workflows/capi.yaml b/.github/workflows/capi.yaml
index 1d70c36b..316c89c1 100644
--- a/.github/workflows/capi.yaml
+++ b/.github/workflows/capi.yaml
@@ -5,6 +5,11 @@ on:
     branches-ignore:
       - pycli
 
+env:
+  # our GLIBC version is too old to support Node 20:
+  # https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
+  ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true
+
 jobs:
   capi:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/msrv.yml b/.github/workflows/msrv.yml
index c236f28a..068baa8b 100644
--- a/.github/workflows/msrv.yml
+++ b/.github/workflows/msrv.yml
@@ -7,6 +7,9 @@ on:
 
 env:
   CARGO_TERM_COLOR: always
+  # our GLIBC version is too old to support Node 20:
+  # https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
+  ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true
 
 jobs:
   build:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 07b06b8f..99dfe6fc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,8 @@ on:
 env:
   # this is make the `gh` binary work
   GH_TOKEN: ${{ github.token }}
-  # avoid node20, which doesn't run in our container: https://github.com/actions/checkout/issues/1809
+  # our GLIBC version is too old to support Node 20:
+  # https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
   ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true
 
 jobs:
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 17556a0a..4371d1d3 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -11,6 +11,9 @@ defaults:
 
 env:
   CARGO_TERM_COLOR: always
+  # our GLIBC version is too old to support Node 20:
+  # https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
+  ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true
 
 jobs:
   build: