diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a6fd0b9..a9fb8a4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -42,7 +42,7 @@ jobs:
 
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.24"
+          go-version: "1.25"
 
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v6
@@ -57,7 +57,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: "18"
+          node-version: "20"
           cache: "npm"
           cache-dependency-path: frontend/package-lock.json
 
@@ -183,7 +183,7 @@ jobs:
 
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.24"
+          go-version: "1.25"
 
       - uses: actions/cache@v4
         with:
@@ -203,7 +203,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: "18"
+          node-version: "20"
           cache: "npm"
           cache-dependency-path: frontend/package-lock.json
 
diff --git a/backend/alembic.ini b/backend/alembic.ini
index 515c490..56979cc 100644
--- a/backend/alembic.ini
+++ b/backend/alembic.ini
@@ -57,7 +57,7 @@ version_path_separator = space  # No separator in paths.
 # are written from script.mako
 # output_encoding = utf-8
 
-sqlalchemy.url = postgresql+asyncpg://postgres:postgres@localhost:5432/tod
+sqlalchemy.url = postgresql+asyncpg://postgres:postgres@localhost:5432/tod_test
 
 
 [post_write_hooks]
diff --git a/backend/tests/integration/conftest.py b/backend/tests/integration/conftest.py
index 4dfe97f..0382f08 100644
--- a/backend/tests/integration/conftest.py
+++ b/backend/tests/integration/conftest.py
@@ -72,9 +72,7 @@ def _ensure_database_setup():
     # Migration 029 (VPN tenant isolation) encrypts a WireGuard server private key
     # and requires CREDENTIAL_ENCRYPTION_KEY.  Provide the dev default if the
     # environment does not already supply it (CI always sets this explicitly).
-    env.setdefault(
-        "CREDENTIAL_ENCRYPTION_KEY", "LLLjnfBZTSycvL2U07HDSxUeTtLxb9cZzryQl0R9E4w="
-    )
+    env.setdefault("CREDENTIAL_ENCRYPTION_KEY", "LLLjnfBZTSycvL2U07HDSxUeTtLxb9cZzryQl0R9E4w=")
 
     # Run Alembic migrations via subprocess (handles DB creation and schema)
     result = subprocess.run(