chore(ci): use Ubuntu 24.04 GitHub Actions runners

.github/workflows/build_and_test_ebclfsa.yml

@@ -26,7 +26,7 @@ concurrency:
 jobs:
   build:
     name: aarch64
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     container:
       image: ghcr.io/eclipse-score/devcontainer:v1.11.0
     steps:

.github/workflows/build_and_test_linux.yml

@@ -25,7 +25,7 @@ concurrency:
   cancel-in-progress: ${{ github.ref_name != 'main' && !startsWith(github.ref_name, 'release/') }}
 jobs:
   x86_64:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: write # required to upload release assets
     steps:

.github/workflows/build_and_test_qnx.yml

@@ -26,7 +26,7 @@ concurrency:
 jobs:
   qnx-build-x86_64:
     name: x86_64
-    runs-on: ${{ vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-latest' }}
+    runs-on: ${{ vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-24.04' }}
     environment: ${{ inputs.environment-name }}
     permissions:
       contents: read

.github/workflows/check_release_approvals.yml

@@ -18,7 +18,7 @@ jobs:
   check-approvals:
     name: Verify Required Approvals
     if: startsWith(github.event.pull_request.base.ref, 'releases/')
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: read
       pull-requests: write

.github/workflows/codeql-multiple-repo-scan.yml

@@ -31,7 +31,7 @@ concurrency:
 jobs:
   analyze-repos:
     name: Analyze Multiple Repositories
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 120 # Prevent indefinite hanging
     permissions:
       security-events: write

.github/workflows/copyright.yml

@@ -18,7 +18,7 @@ on:
     types: [checks_requested]
 jobs:
   copyright-check:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4

.github/workflows/known_good_correct.yml

@@ -21,7 +21,7 @@ permissions:
 jobs:
   check-known-good-matches-bazel:
     name: Check Known Good Matches with Bazel
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4.2.2

.github/workflows/module_tests.yml

@@ -22,7 +22,7 @@ permissions:
 jobs:
   modules:
     name: List modules
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     outputs:
       modules: ${{ steps.modules.outputs.modules }}
     steps:
@@ -37,7 +37,7 @@ jobs:
   test:
     name: Test ${{ matrix.module }}
     needs: modules
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:

.github/workflows/reusable_integration-build.yml

@@ -28,8 +28,8 @@
 #   - config (string, optional, default: bl-x86_64-linux): Bazel config passed to
 #     scripts/integration_test.py.
 #   - repo_runner_labels (string, optional): Runner label(s). Accepts either a
-#     single label string (e.g., ubuntu-latest) or a JSON string representing a
-#     label or an array of labels (e.g., "\"ubuntu-latest\"" or
+#     single label string (e.g., ubuntu-24.04) or a JSON string representing a
+#     label or an array of labels (e.g., "\"ubuntu-24.04\"" or
 #     "[\"self-hosted\",\"linux\",\"x64\"]").
 #   - target_branch (string, optional, default: main): Ref/branch to checkout.
 #
@@ -42,7 +42,7 @@
 #     back to github.token when not provided.
 #
 # Runner selection:
-#   - Priority: `inputs.repo_runner_labels` > 'ubuntu-latest'.
+#   - Priority: `inputs.repo_runner_labels` > 'ubuntu-24.04'.
 #   - `repo_runner_labels` can be provided as a single label string or as JSON
 #     (string or array). When JSON is used, it is parsed via fromJSON().
 #
@@ -56,7 +56,7 @@
 #           known_good: |
 #             { "modules": [] }
 #           config: bl-x86_64-linux
-#           repo_runner_labels: 'ubuntu-latest'
+#           repo_runner_labels: 'ubuntu-24.04'
 #         secrets:
 #           REPO_READ_TOKEN: ${{ secrets.REPO_READ_TOKEN }}
 #
@@ -91,7 +91,7 @@ env:
 jobs:
   integration-test:
     name: Integration Test
-    runs-on: ${{ inputs.repo_runner_labels != '' && (startsWith(inputs.repo_runner_labels, '[') && fromJSON(inputs.repo_runner_labels) || inputs.repo_runner_labels) || 'ubuntu-latest' }}
+    runs-on: ${{ inputs.repo_runner_labels != '' && (startsWith(inputs.repo_runner_labels, '[') && fromJSON(inputs.repo_runner_labels) || inputs.repo_runner_labels) || 'ubuntu-24.04' }}
     steps:
       - name: Clean disk space
         uses: eclipse-score/more-disk-space@v1

.github/workflows/reusable_smoke-test.yml

@@ -27,7 +27,7 @@
 #   - Publishes a summary to the GitHub Step Summary
 #
 # Inputs:
-#   - repo_runner_labels (string, required, default: ubuntu-latest): Runner label.
+#   - repo_runner_labels (string, required, default: ubuntu-24.04): Runner label.
 #   - module_name (string, required): Module to override (e.g., score_baselibs).
 #   - target_branch (string, required, default: main):
 #     The ref to checkout via actions/checkout — can be a branch name, tag, or
@@ -50,7 +50,7 @@
 #       smoke:
 #         uses: eclipse-score/reference_integration/.github/workflows/module-smoke-test.yml@main
 #         with:
-#           repo_runner_labels: ubuntu-latest
+#           repo_runner_labels: ubuntu-24.04
 #           module_name: score_baselibs
 #           target_branch: main
 #         secrets:
@@ -69,7 +69,7 @@ on:
         description: 'The runner tag to use for the job'
         required: true
         type: string
-        default: 'ubuntu-latest'
+        default: 'ubuntu-24.04'
       module_name:
         description: 'Name of the module to override (e.g., score_baselibs).'
         required: true
@@ -88,7 +88,7 @@ env:
 jobs:
   preparation:
     name: Preparation
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     outputs:
       known_good_updated: ${{ steps.set_known_good.outputs.known_good_updated }}
     steps:
@@ -132,7 +132,7 @@ jobs:
           path: known_good.updated.json
   docs:
     name: Generate Documentation
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: preparation
     steps:
       - name: not implemented
@@ -158,7 +158,7 @@ jobs:
       target_branch: ${{ inputs.target_branch }}
   summary:
     name: Publish Summary
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [integration-test, docs]
     if: always()
     steps:

.github/workflows/test_and_docs.yml

@@ -36,7 +36,7 @@ jobs:
   module_tests:
     uses: ./.github/workflows/module_tests.yml
   test_and_docs:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: module_tests
     if: ${{ !cancelled() }}
     permissions:
@@ -193,7 +193,7 @@ jobs:
           if-no-files-found: error
   docs-deploy:
     name: Deploy Documentation to GitHub Pages
-    runs-on: ${{ vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-latest' }}
+    runs-on: ${{ vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-24.04' }}
     needs: test_and_docs
     permissions:
       pages: write

.github/workflows/test_integration.yml

@@ -25,6 +25,6 @@ jobs:
     uses: ./.github/workflows/reusable_smoke-test.yml
     secrets: inherit
     with:
-      repo_runner_labels: 'ubuntu-latest'
+      repo_runner_labels: 'ubuntu-24.04'
       module_name: 'reference_integration'
       target_branch: ${{ github.ref }}