From 24b2bdf49250373e999ede55e56d2ed8ed30e787 Mon Sep 17 00:00:00 2001
From: xtqqczze <45661989+xtqqczze@users.noreply.github.com>
Date: Thu, 14 May 2026 16:51:52 +0100
Subject: [PATCH] ci: pin ubuntu runner to 24.04 in workflows

---
 .github/workflows/CICD.yml                | 60 +++++++++++------------
 .github/workflows/CheckScripts.yml        |  4 +-
 .github/workflows/FixPR.yml               |  2 +-
 .github/workflows/GnuComment.yml          |  2 +-
 .github/workflows/GnuTests.yml            |  8 +--
 .github/workflows/NotifyTracking.yml      |  2 +-
 .github/workflows/SizeComment.yml         |  2 +-
 .github/workflows/android.yml             |  2 +-
 .github/workflows/audit.yml               |  2 +-
 .github/workflows/benchmarks.yml          |  4 +-
 .github/workflows/check-toml.yml          |  2 +-
 .github/workflows/code-quality.yml        | 16 +++---
 .github/workflows/copilot-code-review.yml |  2 +-
 .github/workflows/devcontainer.yml        |  2 +-
 .github/workflows/documentation.yml       |  2 +-
 .github/workflows/freebsd.yml             |  4 +-
 .github/workflows/fuzzing.yml             | 10 ++--
 .github/workflows/l10n.yml                | 26 +++++-----
 .github/workflows/make.yml                |  6 +--
 .github/workflows/manpage-lint.yml        |  2 +-
 .github/workflows/openbsd.yml             |  4 +-
 .github/workflows/wasi.yml                |  2 +-
 README.md                                 |  2 +-
 tests/uutests/src/lib/util.rs             |  2 +-
 24 files changed, 85 insertions(+), 85 deletions(-)

diff --git a/.github/workflows/CICD.yml b/.github/workflows/CICD.yml
index 41549fb943b..01a46c8878b 100644
--- a/.github/workflows/CICD.yml
+++ b/.github/workflows/CICD.yml
@@ -35,7 +35,7 @@ concurrency:
 jobs:
   cargo-deny:
     name: Style/cargo-deny
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -52,7 +52,7 @@ jobs:
         job:
           # note: `cargo-udeps` panics when processing stdbuf/libstdbuf ("uu_stdbuf_libstdbuf"); either b/c of the 'cpp' crate or 'libstdbuf' itself
           #   ... b/c of the panic, a more limited feature set is tested (though only excluding `stdbuf`)
-          - { os: ubuntu-latest  , features: "feat_Tier1,feat_require_unix,feat_require_unix_utmpx" }
+          - { os: ubuntu-24.04  , features: "feat_Tier1,feat_require_unix,feat_require_unix_utmpx" }
           - { os: macos-latest   , features: "feat_Tier1,feat_require_unix,feat_require_unix_utmpx" }
           - { os: windows-latest , features: feat_os_windows }
     steps:
@@ -98,7 +98,7 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          - { os: ubuntu-latest  , features: feat_os_unix }
+          - { os: ubuntu-24.04  , features: feat_os_unix }
 # for now, don't build it on mac & windows because the doc is only published from linux
 # + it needs a bunch of duplication for build
 # and I don't want to add a doc step in the regular build to avoid long builds
@@ -162,7 +162,7 @@ jobs:
     strategy:
       matrix:
         job:
-          - { os: ubuntu-latest , features: feat_os_unix }
+          - { os: ubuntu-24.04 , features: feat_os_unix }
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -249,7 +249,7 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          - { os: ubuntu-latest , features: feat_os_unix }
+          - { os: ubuntu-24.04 , features: feat_os_unix }
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -274,7 +274,7 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          - { os: ubuntu-latest  , name: feat_os_unix    , features: feat_os_unix }
+          - { os: ubuntu-24.04  , name: feat_os_unix    , features: feat_os_unix }
           # Don't fail to build if SELinux specific utils are included by some reason.
           # But we are not interested in existence of stubs
           - { os: macos-latest   , name: feat_os_unix    , features: "feat_os_unix,chcon,runcon" }
@@ -319,7 +319,7 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          - { os: ubuntu-latest  , features: feat_os_unix }
+          - { os: ubuntu-24.04  , features: feat_os_unix }
           - { os: macos-latest   , features: feat_os_unix }
           - { os: windows-latest , features: feat_os_windows }
     steps:
@@ -375,20 +375,20 @@ jobs:
           # the matrix values to the job title, so those jobs read as
           # "Build (..., x86_64-unknown-linux-gnu, ..., PGO)".
           # enable openssl for performance if min_version: already tests pore-Rust checksum crates
-          - { os: ubuntu-latest  , target: arm-unknown-linux-gnueabihf , features: feat_os_unix_gnueabihf , use-cross: use-cross , skip-tests: true }
+          - { os: ubuntu-24.04  , target: arm-unknown-linux-gnueabihf , features: feat_os_unix_gnueabihf , use-cross: use-cross , skip-tests: true }
           - { os: ubuntu-24.04-arm  , target: aarch64-unknown-linux-gnu   , features: feat_os_unix_gnueabihf, pgo: PGO }
-          - { os: ubuntu-latest  , target: aarch64-unknown-linux-musl  , features: feat_os_unix_musl , use-cross: use-cross , skip-tests: true }
-          - { os: ubuntu-latest  , target: riscv64gc-unknown-linux-musl  , features: feat_os_unix_musl , use-cross: use-cross , skip-tests: true }
-          # - { os: ubuntu-latest  , target: x86_64-unknown-linux-gnu    , features: feat_selinux           , use-cross: use-cross }
-          - { os: ubuntu-latest  , target: i686-unknown-linux-gnu      , features: "feat_os_unix,test_risky_names", use-cross: use-cross }
-          - { os: ubuntu-latest  , target: i686-unknown-linux-musl     , features: feat_os_unix_musl , use-cross: use-cross }
-          - { os: ubuntu-latest  , target: x86_64-unknown-linux-gnu    , features: "feat_os_unix,test_risky_names", use-cross: use-cross, skip-publish: true }
-          - { os: ubuntu-latest  , target: x86_64-unknown-linux-gnu    , features: "feat_os_unix,openssl,uudoc"   , use-cross: no, workspace-tests: true, pgo: PGO }
-          - { os: ubuntu-latest  , target: x86_64-unknown-linux-musl   , features: feat_os_unix_musl , use-cross: use-cross }
-          - { os: ubuntu-latest  , target: x86_64-unknown-netbsd, features: "feat_os_unix", use-cross: use-cross , skip-tests: true , check-only: true }
-          # - { os: ubuntu-latest  , target: x86_64-unknown-redox        , features: feat_os_unix_redox     , use-cross: redoxer , skip-tests: true , check-only: true }
-          - { os: ubuntu-latest  , target: wasm32-wasip1, default-features: false, features: feat_wasm, skip-tests: true }
-          - { os: ubuntu-latest  , target: wasm32-wasip2, default-features: false, features: feat_wasm, skip-tests: true }
+          - { os: ubuntu-24.04  , target: aarch64-unknown-linux-musl  , features: feat_os_unix_musl , use-cross: use-cross , skip-tests: true }
+          - { os: ubuntu-24.04  , target: riscv64gc-unknown-linux-musl  , features: feat_os_unix_musl , use-cross: use-cross , skip-tests: true }
+          # - { os: ubuntu-24.04  , target: x86_64-unknown-linux-gnu    , features: feat_selinux           , use-cross: use-cross }
+          - { os: ubuntu-24.04  , target: i686-unknown-linux-gnu      , features: "feat_os_unix,test_risky_names", use-cross: use-cross }
+          - { os: ubuntu-24.04  , target: i686-unknown-linux-musl     , features: feat_os_unix_musl , use-cross: use-cross }
+          - { os: ubuntu-24.04  , target: x86_64-unknown-linux-gnu    , features: "feat_os_unix,test_risky_names", use-cross: use-cross, skip-publish: true }
+          - { os: ubuntu-24.04  , target: x86_64-unknown-linux-gnu    , features: "feat_os_unix,openssl,uudoc"   , use-cross: no, workspace-tests: true, pgo: PGO }
+          - { os: ubuntu-24.04  , target: x86_64-unknown-linux-musl   , features: feat_os_unix_musl , use-cross: use-cross }
+          - { os: ubuntu-24.04  , target: x86_64-unknown-netbsd, features: "feat_os_unix", use-cross: use-cross , skip-tests: true , check-only: true }
+          # - { os: ubuntu-24.04  , target: x86_64-unknown-redox        , features: feat_os_unix_redox     , use-cross: redoxer , skip-tests: true , check-only: true }
+          - { os: ubuntu-24.04  , target: wasm32-wasip1, default-features: false, features: feat_wasm, skip-tests: true }
+          - { os: ubuntu-24.04  , target: wasm32-wasip2, default-features: false, features: feat_wasm, skip-tests: true }
           - { os: macos-latest   , target: aarch64-apple-darwin        , features: "feat_os_unix,openssl", workspace-tests: true, pgo: PGO } # M1 CPU
           - { os: macos-latest   , target: x86_64-apple-darwin         , features: feat_os_unix, workspace-tests: true, pgo: PGO }
           - { os: windows-latest , target: i686-pc-windows-msvc        , features: feat_os_windows }
@@ -747,7 +747,7 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          - { os: ubuntu-latest  , features: unix }
+          - { os: ubuntu-24.04  , features: unix }
           # FIXME: Re-enable macos code coverage
           # - { os: macos-latest   , features: macos }
           # FIXME: Re-enable Code Coverage on windows, which currently fails due to "profiler_builtins". See #6686.
@@ -803,7 +803,7 @@ jobs:
       run: |
         ## Install/setup prerequisites
         case '${{ matrix.job.os }}' in
-          ubuntu-latest)
+          ubuntu-24.04)
             # selinux and systemd headers needed to build tests
             # acl: setfacl for coverage profile-trace dir default ACL (umask 0777 tests)
             sudo apt-get -y update
@@ -873,9 +873,9 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          # Linux: exercises OPENSSL_NO_VENDOR=1 (dynamic against system libcrypto). ubuntu-latest ships libssl-dev
+          # Linux: exercises OPENSSL_NO_VENDOR=1 (dynamic against system libcrypto). ubuntu-24.04 ships libssl-dev
           # binaries with OPENSSL_NO_VENDOR=0 are tested and published at build job
-          - { os: ubuntu-latest, features: "md5sum,sha1sum,sha224sum,sha256sum,sha384sum,sha512sum,cksum,openssl" }
+          - { os: ubuntu-24.04, features: "md5sum,sha1sum,sha224sum,sha256sum,sha384sum,sha512sum,cksum,openssl" }
           # macOS: vendored only — system libcrypto needs OPENSSL_DIR
           # pointing at Homebrew, which isn't worth wiring up for a smoke test.
           # MinGW(UCRT): done at make.yml as actual consumer is MSYS2 only
@@ -906,7 +906,7 @@ jobs:
   test_no_diagnostics:
     name: Build/No-diagnostics
     needs: [ min_version, deps ]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 60
     steps:
     - uses: actions/checkout@v7
@@ -949,7 +949,7 @@ jobs:
   test_selinux:
     name: Build/SELinux
     needs: [ min_version, deps ]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -981,7 +981,7 @@ jobs:
 
   test_safe_traversal:
     name: Safe Traversal Security Check
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [ min_version, deps ]
 
     steps:
@@ -998,7 +998,7 @@ jobs:
 
   test_libc_interposition:
     name: libc Interposition Check
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [ min_version, deps ]
 
     steps:
@@ -1015,7 +1015,7 @@ jobs:
 
   test_open_once:
     name: Redundant Open Check
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [ min_version, deps ]
 
     steps:
@@ -1032,7 +1032,7 @@ jobs:
 
   test_toctou:
     name: TOCTOU Security Check
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [ min_version, deps ]
 
     steps:
diff --git a/.github/workflows/CheckScripts.yml b/.github/workflows/CheckScripts.yml
index 61d9cbf6bc1..10d61fdcd6d 100644
--- a/.github/workflows/CheckScripts.yml
+++ b/.github/workflows/CheckScripts.yml
@@ -25,7 +25,7 @@ concurrency:
 jobs:
   shell_check:
     name: ShellScript/Check
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: read
     steps:
@@ -43,7 +43,7 @@ jobs:
 
   shell_fmt:
     name: ShellScript/Format
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: read
     steps:
diff --git a/.github/workflows/FixPR.yml b/.github/workflows/FixPR.yml
index a38a76a4432..3d4f51de3ae 100644
--- a/.github/workflows/FixPR.yml
+++ b/.github/workflows/FixPR.yml
@@ -27,7 +27,7 @@ jobs:
     strategy:
       matrix:
         job:
-          - { os: ubuntu-latest , features: feat_os_unix }
+          - { os: ubuntu-24.04 , features: feat_os_unix }
     steps:
     - uses: actions/checkout@v7.0.1
       with:
diff --git a/.github/workflows/GnuComment.yml b/.github/workflows/GnuComment.yml
index ed5deb0505c..7572667b6cd 100644
--- a/.github/workflows/GnuComment.yml
+++ b/.github/workflows/GnuComment.yml
@@ -15,7 +15,7 @@ jobs:
       actions: read  #  to list workflow runs artifacts
       pull-requests: write  #  to comment on pr
 
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     if: >
       github.event.workflow_run.event == 'pull_request' &&
       (github.event.workflow_run.conclusion == 'success' ||
diff --git a/.github/workflows/GnuTests.yml b/.github/workflows/GnuTests.yml
index f6a370d5a2f..5594a1f92b1 100644
--- a/.github/workflows/GnuTests.yml
+++ b/.github/workflows/GnuTests.yml
@@ -180,7 +180,7 @@ jobs:
 
   selinux:
     name: Run GNU tests (SELinux)
-    runs-on: ubuntu-latest # using VM's glibc
+    runs-on: ubuntu-24.04 # using VM's glibc
     steps:
     #### Get the code
     - name: Checkout code (uutils)
@@ -291,7 +291,7 @@ jobs:
 
   qemu:
     name: Run GNU tests (SMACK/ROOTFS)
-    runs-on: ubuntu-latest # using Arch glibc
+    runs-on: ubuntu-24.04 # using Arch glibc
     steps:
     - name: Checkout code (uutils)
       uses: actions/checkout@v7.0.1
@@ -335,7 +335,7 @@ jobs:
       actions: read  # to download this run's own result artifacts
       contents: read  # for actions/checkout to fetch code, and to read the reference branch
     name: Aggregate GNU test results
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - name: Initialize workflow variables
       id: vars
@@ -605,7 +605,7 @@ jobs:
       actions: read  # to download this run's own result artifacts
       contents: write  # to push to the reference branch
     name: Publish reference GNU test results
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     ## Only one run may publish at a time.  The step below reads the currently
     ## published run id and then force-pushes; two overlapping runs could
     ## interleave those, letting an older one overwrite a newer reference.
diff --git a/.github/workflows/NotifyTracking.yml b/.github/workflows/NotifyTracking.yml
index ef7edd7d604..24d9cc7a031 100644
--- a/.github/workflows/NotifyTracking.yml
+++ b/.github/workflows/NotifyTracking.yml
@@ -36,7 +36,7 @@ jobs:
       && github.event.workflow_run.head_branch == github.event.repository.default_branch
       && github.event.workflow_run.conclusion != 'cancelled'
       && github.event.workflow_run.conclusion != 'skipped'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     ## The 'secrets' context is not available in a step's 'if:', so fold the
     ## check into a job-level env var, which is.
     env:
diff --git a/.github/workflows/SizeComment.yml b/.github/workflows/SizeComment.yml
index 032c85d013d..3e44eb37cbb 100644
--- a/.github/workflows/SizeComment.yml
+++ b/.github/workflows/SizeComment.yml
@@ -15,7 +15,7 @@ jobs:
       actions: read  #  to list workflow runs artifacts
       pull-requests: write  #  to comment on pr
 
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     if: >
       github.event.workflow_run.event == 'pull_request'
     steps:
diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index 0d20ba79ee6..f84e0e62246 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -34,7 +34,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest] # , macos-latest
+        os: [ubuntu-24.04] # , macos-latest
         cores: [4] # , 6
         ram: [4096]
         api-level: [28]
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index d92ecc7bd07..5ef8cd8362d 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -11,7 +11,7 @@ permissions:
 
 jobs:
   audit:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v7.0.1
         with:
diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml
index ac8e6e4afa4..32436f0c0a8 100644
--- a/.github/workflows/benchmarks.yml
+++ b/.github/workflows/benchmarks.yml
@@ -27,7 +27,7 @@ concurrency:
 jobs:
   detects-benchmarks:
     name: Detect changes on crates
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     outputs:
       package: ${{ steps.detect.outputs.package }}
     steps:
@@ -67,7 +67,7 @@ jobs:
     needs: detects-benchmarks
     if: needs.detects-benchmarks.outputs.package != '[]'
     name: Run ${{ matrix.type }} benchmarks for ${{ matrix.package }} (CodSpeed)
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 90
     env:
       CARGO_INCREMENTAL: 0
diff --git a/.github/workflows/check-toml.yml b/.github/workflows/check-toml.yml
index ff130fb7693..ef04fb15386 100644
--- a/.github/workflows/check-toml.yml
+++ b/.github/workflows/check-toml.yml
@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   check:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v7.0.1
         with:
diff --git a/.github/workflows/code-quality.yml b/.github/workflows/code-quality.yml
index 806dfec0e06..bad65c0ac33 100644
--- a/.github/workflows/code-quality.yml
+++ b/.github/workflows/code-quality.yml
@@ -31,7 +31,7 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          - { os: ubuntu-latest , features: feat_os_unix }
+          - { os: ubuntu-24.04 , features: feat_os_unix }
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -71,11 +71,11 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          - { os: ubuntu-latest  , features: all             , workspace: true }
+          - { os: ubuntu-24.04  , features: all             , workspace: true }
           - { os: macos-latest   , features: all             , workspace: true }
           - { os: windows-latest , features: feat_os_windows }
-          - { os: ubuntu-latest  , features: feat_wasm , target: wasm32-wasip1 }
-          - { os: ubuntu-latest  , features: feat_wasm , target: wasm32-wasip2 }
+          - { os: ubuntu-24.04  , features: feat_wasm , target: wasm32-wasip1 }
+          - { os: ubuntu-24.04  , features: feat_wasm , target: wasm32-wasip2 }
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -158,7 +158,7 @@ jobs:
     strategy:
       matrix:
         job:
-          - { os: ubuntu-latest , features: feat_os_unix }
+          - { os: ubuntu-24.04 , features: feat_os_unix }
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -195,7 +195,7 @@ jobs:
 
   style_empty_assertions:
     name: Style/Empty assertions check
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
         uses: actions/checkout@v7.0.1
@@ -211,7 +211,7 @@ jobs:
 
   python:
     name: Style/Python
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Clone repository
         uses: actions/checkout@v7.0.1
@@ -235,7 +235,7 @@ jobs:
 
   pre_commit:
     name: Pre-commit hooks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
         uses: actions/checkout@v7.0.1
diff --git a/.github/workflows/copilot-code-review.yml b/.github/workflows/copilot-code-review.yml
index f6c5fdb4966..a1166dd5abb 100644
--- a/.github/workflows/copilot-code-review.yml
+++ b/.github/workflows/copilot-code-review.yml
@@ -15,7 +15,7 @@ permissions:
 jobs:
   copilot-setup-steps:
     # Copilot code review only supports Ubuntu x64 runners.
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v7.0.1
         with:
diff --git a/.github/workflows/devcontainer.yml b/.github/workflows/devcontainer.yml
index 1418c4e8187..83a96030dcd 100644
--- a/.github/workflows/devcontainer.yml
+++ b/.github/workflows/devcontainer.yml
@@ -19,7 +19,7 @@ concurrency:
 jobs:
   test:
     name: Verify devcontainer
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 45
     steps:
     - uses: actions/checkout@v7.0.1
diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
index 1d83c070326..f27594af6b2 100644
--- a/.github/workflows/documentation.yml
+++ b/.github/workflows/documentation.yml
@@ -23,7 +23,7 @@ permissions:
 jobs:
   check-doc:
     name: Verify uudoc generates correct documentation
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout repository
diff --git a/.github/workflows/freebsd.yml b/.github/workflows/freebsd.yml
index 95a80c29893..e6234e2e0d0 100644
--- a/.github/workflows/freebsd.yml
+++ b/.github/workflows/freebsd.yml
@@ -23,7 +23,7 @@ concurrency:
 jobs:
   style:
     name: Style and Lint
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 45
     strategy:
       fail-fast: false
@@ -109,7 +109,7 @@ jobs:
 
   test:
     name: Tests
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 45
     strategy:
       fail-fast: false
diff --git a/.github/workflows/fuzzing.yml b/.github/workflows/fuzzing.yml
index 0c67b0484ff..b4d2e9a8878 100644
--- a/.github/workflows/fuzzing.yml
+++ b/.github/workflows/fuzzing.yml
@@ -32,7 +32,7 @@ concurrency:
 jobs:
   detect:
     name: Detect changes on crates
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     outputs:
       targets: ${{ steps.detect.outputs.targets }}
       all: ${{ steps.detect.outputs.all }}
@@ -113,7 +113,7 @@ jobs:
     name: Build and test uufuzz examples
     needs: detect
     if: needs.detect.outputs.all == 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -147,7 +147,7 @@ jobs:
     name: Build the fuzzers
     needs: detect
     if: needs.detect.outputs.all == 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -171,7 +171,7 @@ jobs:
     name: Fuzz (${{ matrix.target.name }})
     needs: detect
     if: needs.detect.outputs.targets != '[]'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 15
     env:
       RUN_FOR: 60
@@ -271,7 +271,7 @@ jobs:
   fuzz-summary:
     needs: [detect, fuzz-run]
     name: Fuzzing Summary
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     if: always() && needs.detect.outputs.targets != '[]'
     steps:
       - uses: actions/checkout@v7.0.1
diff --git a/.github/workflows/l10n.yml b/.github/workflows/l10n.yml
index c6bc7b20f8f..f9bfad7f8b0 100644
--- a/.github/workflows/l10n.yml
+++ b/.github/workflows/l10n.yml
@@ -30,7 +30,7 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          - { os: ubuntu-latest  , features: "feat_os_unix" }
+          - { os: ubuntu-24.04  , features: "feat_os_unix" }
           - { os: macos-latest   , features: "feat_os_unix" }
           - { os: windows-latest , features: "feat_os_windows" }
     steps:
@@ -79,7 +79,7 @@ jobs:
 
   l10n_fluent_syntax:
     name: L10n/Fluent Syntax Check
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -127,7 +127,7 @@ jobs:
 
   l10n_clap_error_localization:
     name: L10n/Clap Error Localization Test
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -290,7 +290,7 @@ jobs:
 
   l10n_french_integration:
     name: L10n/French Integration Test
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -400,7 +400,7 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          - { os: ubuntu-latest  , features: "feat_os_unix" }
+          - { os: ubuntu-24.04  , features: "feat_os_unix" }
           - { os: macos-latest   , features: "feat_os_unix" }
     steps:
     - uses: actions/checkout@v7.0.1
@@ -550,7 +550,7 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          - { os: ubuntu-latest  , features: "feat_os_unix" }
+          - { os: ubuntu-24.04  , features: "feat_os_unix" }
           - { os: macos-latest   , features: "feat_os_unix" }
     steps:
     - uses: actions/checkout@v7.0.1
@@ -617,7 +617,7 @@ jobs:
         fi
 
         # Test French localization with make-installed binary (Ubuntu only)
-        if [ "${{ matrix.job.os }}" = "ubuntu-latest" ]; then
+        if [ "${{ matrix.job.os }}" = "ubuntu-24.04" ]; then
           echo "Testing French localization with make-installed binary..."
 
           # Set French locale
@@ -882,7 +882,7 @@ jobs:
 
   l10n_locale_support_verification:
     name: L10n/Locale Support Verification
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -1114,7 +1114,7 @@ jobs:
 
   l10n_embedded_locale_regression_test:
     name: L10n/Embedded Locale Regression Test
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -1140,7 +1140,7 @@ jobs:
 
   l10n_locale_embedding_cat:
     name: L10n/Locale Embedding - Cat Utility
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -1171,7 +1171,7 @@ jobs:
 
   l10n_locale_embedding_ls:
     name: L10n/Locale Embedding - Ls Utility
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -1202,7 +1202,7 @@ jobs:
 
   l10n_locale_embedding_multicall:
     name: L10n/Locale Embedding - Multicall Binary
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -1235,7 +1235,7 @@ jobs:
 
   l10n_locale_embedding_cargo_install:
     name: L10n/Locale Embedding - Cargo Install
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7.0.1
       with:
diff --git a/.github/workflows/make.yml b/.github/workflows/make.yml
index c1fc403d3c2..c861d8e4eff 100644
--- a/.github/workflows/make.yml
+++ b/.github/workflows/make.yml
@@ -43,7 +43,7 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          - { os: ubuntu-latest , features: feat_os_unix }
+          - { os: ubuntu-24.04 , features: feat_os_unix }
     steps:
     - uses: actions/checkout@v7.0.1
       with:
@@ -377,7 +377,7 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          - { os: ubuntu-latest }
+          - { os: ubuntu-24.04 }
     steps:
     - name: Initialize workflow variables
       id: vars
@@ -461,7 +461,7 @@ jobs:
       fail-fast: false
       matrix:
         job:
-          - { os: ubuntu-latest }
+          - { os: ubuntu-24.04 }
     steps:
     - name: Initialize workflow variables
       id: vars
diff --git a/.github/workflows/manpage-lint.yml b/.github/workflows/manpage-lint.yml
index 58ad8eb9b04..59f3fb913bc 100644
--- a/.github/workflows/manpage-lint.yml
+++ b/.github/workflows/manpage-lint.yml
@@ -28,7 +28,7 @@ permissions:
 jobs:
   manpage-lint:
     name: Validate manpages with mandoc
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     strategy:
       matrix:
         locale: [en_US.UTF-8, fr_FR.UTF-8]
diff --git a/.github/workflows/openbsd.yml b/.github/workflows/openbsd.yml
index 73120728818..d85cbfa0902 100644
--- a/.github/workflows/openbsd.yml
+++ b/.github/workflows/openbsd.yml
@@ -23,7 +23,7 @@ concurrency:
 jobs:
   style:
     name: Style and Lint
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 60
     strategy:
       fail-fast: false
@@ -120,7 +120,7 @@ jobs:
 
   test:
     name: Tests
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 60
     strategy:
       fail-fast: false
diff --git a/.github/workflows/wasi.yml b/.github/workflows/wasi.yml
index 68b161c851e..86735359c9d 100644
--- a/.github/workflows/wasi.yml
+++ b/.github/workflows/wasi.yml
@@ -19,7 +19,7 @@ concurrency:
 jobs:
   test_wasi:
     name: Tests
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:
diff --git a/README.md b/README.md
index fea644f011c..ebf346373f1 100644
--- a/README.md
+++ b/README.md
@@ -32,7 +32,7 @@ We provide prebuilt binaries, manpages, and shell completions from main branch a
 The latest stable tag https://github.com/uutils/coreutils/releases/latest also exists for reproducible products and packagers.
 Bug reporters should use binary from latest commit.
 
-Minimal compatible glibc version is same with ubuntu-latest runner. Use `coreutils-*-musl` if `coreutils-*-gnu` is not compatible with your system.
+Minimal compatible glibc version is same with ubuntu-24.04 runner. Use `coreutils-*-musl` if `coreutils-*-gnu` is not compatible with your system.
 
 </div>
 
diff --git a/tests/uutests/src/lib/util.rs b/tests/uutests/src/lib/util.rs
index bd537fa543c..a008c7fb716 100644
--- a/tests/uutests/src/lib/util.rs
+++ b/tests/uutests/src/lib/util.rs
@@ -3032,7 +3032,7 @@ pub fn host_name_for(util_name: &str) -> Cow<'_, str> {
     util_name.into()
 }
 
-// Choose same coreutils version with ubuntu-latest runner: https://github.com/actions/runner-images/tree/main/images/ubuntu
+// Choose same coreutils version with ubuntu-24.04 runner: https://github.com/actions/runner-images/tree/main/images/ubuntu
 const VERSION_MIN: &str = "9.4"; // minimum Version for the reference `coreutil` in `$PATH`
 
 const UUTILS_WARNING: &str = "uutils-tests-warning";