diff --git a/.github/workflows/node-ci.yml b/.github/workflows/node-ci.yml
index f7443ffb..db680c54 100644
--- a/.github/workflows/node-ci.yml
+++ b/.github/workflows/node-ci.yml
@@ -25,24 +25,15 @@ jobs:
           cache: npm
       - run: npm clean-install
       - run: npm audit signatures
-      - run: NODE_OPTIONS=--no-experimental-fetch npm test
+      - run: npm test
       - uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
   verify-matrix:
     runs-on: ubuntu-latest
     strategy:
       matrix:
         node:
-          - 16.14.0
-          - 18.0.0
-          - 18
-          - 19
-        include:
-          - node: 18
-            options: '--no-experimental-fetch'
-          - node: 18.0.0
-            options: '--no-experimental-fetch'
-          - node: 19
-            options: '--no-experimental-fetch'
+          - 18.17.0
+          - 20.6.1
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Setup node ${{ matrix.node_version }}
@@ -51,7 +42,7 @@ jobs:
           node-version: ${{ matrix.node }}
           cache: npm
       - run: npm clean-install
-      - run: NODE_OPTIONS="${{ matrix.options }}" npm test
+      - run: npm test
   release:
     needs:
       - verify
diff --git a/.husky/pre-commit b/.husky/pre-commit
index 06d3bc35..449fcdee 100755
--- a/.husky/pre-commit
+++ b/.husky/pre-commit
@@ -1,4 +1,4 @@
 #!/bin/sh
 . "$(dirname "$0")/_/husky.sh"
 
-NODE_OPTIONS=--no-experimental-fetch npm test
+npm test
diff --git a/package-lock.json b/package-lock.json
index 8b8f771d..1eba9212 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
         "@octokit/rest": "^19.0.0",
         "@travi/cli-messages": "1.1.1",
         "git-config": "0.0.7",
-        "octokit-auth-netrc": "^2.0.0"
+        "octokit-auth-netrc": "^3.0.0"
       },
       "devDependencies": {
         "@cucumber/cucumber": "9.6.0",
@@ -52,7 +52,7 @@
         "vitest": "0.34.6"
       },
       "engines": {
-        "node": "^16.14 || >=18"
+        "node": "^18.17 || >=20.6.1"
       }
     },
     "node_modules/@aashutoshrathi/word-wrap": {
@@ -16183,15 +16183,23 @@
       }
     },
     "node_modules/octokit-auth-netrc": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/octokit-auth-netrc/-/octokit-auth-netrc-2.1.0.tgz",
-      "integrity": "sha512-WRJ1sdLsPfymBbM5OZLTyic6g+RBXMg2rrZhfKj3mJSw+aYdPbfMMljVODssm1DfQf36Gj6uOKueALyueFDzgw==",
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/octokit-auth-netrc/-/octokit-auth-netrc-3.0.0.tgz",
+      "integrity": "sha512-rI0+WFmyFGAnnSL0Yfnj/hnBgd3WYUPIHQMEKXqyEUyLesP6q/c5vLULZ55ghGWYLkjhMOwywSlARb3PQWfKww==",
       "dependencies": {
-        "@octokit/auth-token": "^3.0.0",
+        "@octokit/auth-token": "^4.0.0",
         "netrc": "0.1.4"
       },
       "engines": {
-        "node": "^14.15 || >=16"
+        "node": "^18.17"
+      }
+    },
+    "node_modules/octokit-auth-netrc/node_modules/@octokit/auth-token": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@octokit/auth-token/-/auth-token-4.0.0.tgz",
+      "integrity": "sha512-tY/msAuJo6ARbK6SPIxZrPBms3xPbfwBrulZe0Wtr/DIY9lje2HeV1uoebShn6mx7SjCHif6EjMvoREj+gZ+SA==",
+      "engines": {
+        "node": ">= 18"
       }
     },
     "node_modules/once": {
diff --git a/package.json b/package.json
index d63a6813..40466ea7 100644
--- a/package.json
+++ b/package.json
@@ -5,7 +5,7 @@
   "version": "0.0.0-semantically-released",
   "type": "module",
   "engines": {
-    "node": "^16.14 || >=18"
+    "node": "^18.17 || >=20.6.1"
   },
   "author": "Matt Travi <npm@travi.org> (https://matt.travi.org/)",
   "repository": "travi/github-scaffolder",
@@ -28,7 +28,7 @@
     "test:unit": "cross-env NODE_ENV=test c8 run-s test:unit:base",
     "pretest:integration": "run-s build",
     "test:integration": "run-s 'test:integration:base -- --profile noWip'",
-    "test:integration:base": "NODE_OPTIONS=\"--enable-source-maps $NODE_OPTIONS\" cucumber-js test/integration",
+    "test:integration:base": "NODE_OPTIONS=\"--enable-source-maps --no-experimental-fetch\" cucumber-js test/integration",
     "test:integration:debug": "DEBUG=test,nock.* run-s test:integration",
     "test:integration:wip": "run-s 'test:integration:base -- --profile wip'",
     "test:integration:focus": "run-s 'test:integration:base -- --profile focus'",
@@ -54,7 +54,7 @@
     "@octokit/rest": "^19.0.0",
     "@travi/cli-messages": "1.1.1",
     "git-config": "0.0.7",
-    "octokit-auth-netrc": "^2.0.0"
+    "octokit-auth-netrc": "^3.0.0"
   },
   "devDependencies": {
     "@cucumber/cucumber": "9.6.0",