ci: pin runner images to ubuntu-24.04

[4444J99]

Pins runs-on: ubuntu-latest → ubuntu-24.04 (current image) ahead of GitHub's Oct 19, 2026 switch of ubuntu-latest to Ubuntu 26. Approved by Anthony Oct 12.

Receipt

• Files: .github/workflows/ci.yml .github/workflows/cla.yml .github/workflows/codeql.yml .github/workflows/release-drafter.yml .github/workflows/secret-scan.yml .github/workflows/stale.yml
• Commands: sed -i -E 's/\bubuntu-latest\b/ubuntu-24.04/g' <workflows>; rg -c ubuntu-latest .github → 0 left; actionlint 1.7.12 .github/workflows/*.y*ml → 0 issues (baseline 0); python3 yaml.safe_load over 8 .github YAML files → all parsed, 0 failures.
• Head SHA verified: b174b4ae7f47fb1dc78c3c7192a4c880fbce5edf
• No logic change: runner label only; no application code touched.
• Merge only on honest green, pinned with --match-head-commit b174b4ae7f47fb1dc78c3c7192a4c880fbce5edf.

Summary by Sourcery

Enhancements:

• Pin all GitHub Actions workflows to the Ubuntu 24.04 runner image for predictable CI execution ahead of the ubuntu-latest image transition.

Summary by CodeRabbit

• Chores
  • Automated checks, security scans, release tasks, and repository maintenance now run on Ubuntu 24.04. These updates affect the project’s behind-the-scenes workflows; no user-facing features or behavior have changed.

[sourcery-ai]

Sorry @4444J99, you've used your own review budget of 250,000 diff characters for the last 7 days.

You can request another review in 2 days and 9 hours by commenting @sourcery-ai review. Upgrade to get a review now.

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

This PR proactively replaces the floating ubuntu-latest runner label with ubuntu-24.04 across all six GitHub Actions workflows, preserving workflow logic while avoiding the planned future image migration. Repository checks confirm the references, workflow syntax, and YAML parsing are clean.

File-Level Changes

Change	Details	Files
Pin all GitHub Actions jobs to the Ubuntu 24.04 hosted runner image instead of the moving ubuntu-latest label.	Updated the runner label for CI test jobs. Applied the same pin to CLA, CodeQL, release drafting, secret scanning, and stale automation jobs.	.github/workflows/ci.yml .github/workflows/cla.yml .github/workflows/codeql.yml .github/workflows/release-drafter.yml .github/workflows/secret-scan.yml .github/workflows/stale.yml
Validate that the runner-label migration does not introduce workflow or YAML syntax issues.	Confirmed no ubuntu-latest references remain under .github. Ran actionlint with zero issues. Parsed the GitHub YAML files successfully.	.github/workflows/ci.yml .github/workflows/cla.yml .github/workflows/codeql.yml .github/workflows/release-drafter.yml .github/workflows/secret-scan.yml .github/workflows/stale.yml

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	🔄 Running since 2026-10-12T15:41:10.168949Z	b174b4a	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 292e2559-3c76-4604-808b-998b4acb7e0e

---

📥 Commits

Reviewing files that changed from the base of the PR and between 4e8a944 and b174b4a.

---

📒 Files selected for processing (6)

• .github/workflows/ci.yml
• .github/workflows/cla.yml
• .github/workflows/codeql.yml
• .github/workflows/release-drafter.yml
• .github/workflows/secret-scan.yml
• .github/workflows/stale.yml

---

 __________________________________________________
< Turning your WTFs per minute into OMGs per hour. >
 --------------------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       / 　 づ

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}