project: downgrade and pin Ubuntu 24.04 runners

.github/workflows/cd.yml

@@ -9,7 +9,7 @@ on:
 
 jobs:
   release-dockerimage:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7
 

.github/workflows/ci.yml

@@ -13,7 +13,7 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:
@@ -35,7 +35,7 @@ jobs:
         bundle exec rake ci
 
   actionlint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7
     - name: Check workflow files
@@ -45,7 +45,7 @@ jobs:
         ./actionlint
 
   renovate-config-validator:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     container:
       image: ghcr.io/renovatebot/renovate
       options: --user root

.github/workflows/dockerhub.yml

@@ -9,7 +9,7 @@ on:
 
 jobs:
   pull-released-dockerimages:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - name: Avoid stale tags by pulling
       run: |

.github/workflows/vulnscan.yml

@@ -8,7 +8,7 @@ on:
 
 jobs:
   scan-released-dockerimages:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       TRIVY_IGNORE_UNFIXED: 'true'
       TRIVY_REMOVED_PKGS: 'true'