diff --git a/.github/workflows/context7-refresh.yml b/.github/workflows/context7-refresh.yml
index 3876116..3ee0624 100644
--- a/.github/workflows/context7-refresh.yml
+++ b/.github/workflows/context7-refresh.yml
@@ -23,7 +23,8 @@ concurrency:
 jobs:
   refresh:
     name: Refresh Context7 docs
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
     environment: context7
     steps:
       - name: Trigger Context7 refresh
@@ -39,7 +40,7 @@ jobs:
 
           body_file="$(mktemp)"
           trap 'rm -f "$body_file"' EXIT
-          status="$(curl -sS -o "$body_file" -w "%{http_code}" -X POST "https://context7.com/api/v1/refresh" \
+          status="$(curl --connect-timeout 10 --max-time 30 --proto '=https' -sS --tlsv1.2 -o "$body_file" -w "%{http_code}" -X POST "https://context7.com/api/v1/refresh" \
             -H "Content-Type: application/json" \
             -H "Authorization: Bearer ${CONTEXT7_API_KEY}" \
             -d '{"libraryName": "/xquik-dev/x-twitter-scraper-python"}')"