Bump Ubuntu action runner to 24.04 (#541)

* Bump Ubuntu action runner to 24.04

* Add workaround to install libyaml because of the patch is not yet deployed

actions/runner-images@a9fed55

* This step should be done before setup-ruby

* Specify setup-ruby versions

* I don't know why appeared only in 3.2

* Consider if added macos and windows runner here

.github/workflows/ci-nix.yml

@@ -25,7 +25,7 @@ jobs:
       fail-fast: false
       matrix:
         os:
-          - ubuntu-latest
+          - ubuntu-24.04
           - macos-14
     runs-on: ${{ matrix.os }}
     timeout-minutes: 30

.github/workflows/ci.yml

@@ -34,13 +34,18 @@ jobs:
       # Syntax https://docs.github.com/en/actions/using-jobs/using-a-matrix-for-your-jobs
       matrix:
         # macos is covered in nix ci
-        os: ['ubuntu-latest']
+        os: ['ubuntu-24.04']
         # Due to https://github.com/actions/runner/issues/849, we have to use quotes for 'n.0'
         ruby: ['head', '3.3', '3.2']
     runs-on: ${{ matrix.os }}
     steps:
+      # libyaml is needed for psych, see https://github.com/actions/runner-images/issues/9895
+      # GitHub installs libyaml-dev in latest runners, but often dropped in new runners.
+      - name: Install libyaml
+        if: startsWith(matrix.os, 'ubuntu-') && matrix.ruby == '3.2'
+        run: sudo apt-get install --no-install-recommends --assume-yes libyaml-dev
       - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
+      - uses: ruby/setup-ruby@7dc18ff0ca6e3630d3f29d2a85ebf6cc27ae9d6c # v1.177.0
         env:
           # https://github.com/kachick/ruby-ulid/blob/104834846baf5caa1e8536a11c43acdd56fc849c/CONTRIBUTING.md#adding-dependencies-for-this-gem
           BUNDLE_WITHOUT: development

.github/workflows/codeql.yml

@@ -23,7 +23,7 @@ on:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       actions: read
       contents: read

.github/workflows/dependency-review.yml

@@ -13,7 +13,7 @@ permissions:
 jobs:
   dependency-review:
     timeout-minutes: 15
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: 'Checkout Repository'
         uses: actions/checkout@v4

.github/workflows/lint.yml

@@ -11,17 +11,17 @@ on:
 jobs:
   rubocop:
     timeout-minutes: 15
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-24.04'
     steps:
       - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
+      - uses: ruby/setup-ruby@7dc18ff0ca6e3630d3f29d2a85ebf6cc27ae9d6c # v1.177.0
         with:
           bundler-cache: true # runs 'bundle install' and caches installed gems automatically
       - run: bundle exec rake rubocop
 
   dprint:
     timeout-minutes: 15
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - uses: dprint/check@v2.2
@@ -30,7 +30,7 @@ jobs:
 
   typos:
     timeout-minutes: 15
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - uses: crate-ci/typos@v1.21.0 # selfup { "regex": "\\d\\.\\d+\\.\\d+", "script": "typos --version | cut -d ' ' -f 2" }

.github/workflows/merge-bot-pr.yml

@@ -10,7 +10,7 @@ permissions:
 jobs:
   dependabot:
     timeout-minutes: 30
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     if: ${{ github.actor == 'dependabot[bot]' }}
     steps:
       - name: Dependabot metadata
@@ -40,7 +40,7 @@ jobs:
   #   Changing in all personal repository is annoy task for me. Even if using terrafform, getting mandatory CI names in each repo is too annoy!
   renovate:
     timeout-minutes: 30
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     if: ${{ github.actor == 'renovate[bot]' }}
     steps:
       - name: Wait other jobs
@@ -57,7 +57,7 @@ jobs:
   # https://github.com/kachick/anylang-template/issues/51
   selfup-runner:
     timeout-minutes: 30
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     if: ${{ github.actor == 'selfup-runner[bot]' }}
     steps:
       - name: Wait other jobs

.github/workflows/pages.yml

@@ -30,7 +30,7 @@ jobs:
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     name: Build and deploy YARD
     steps:
       - uses: kachick/deploy-yard-to-pages@v1

.github/workflows/signature.yml

@@ -29,19 +29,19 @@ on:
 jobs:
   rbs:
     timeout-minutes: 15
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-24.04'
     steps:
       - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
+      - uses: ruby/setup-ruby@7dc18ff0ca6e3630d3f29d2a85ebf6cc27ae9d6c # v1.177.0
         with:
           bundler-cache: true # runs 'bundle install' and caches installed gems automatically
       - run: bundle exec rake rbs
   yard:
     timeout-minutes: 15
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-24.04'
     steps:
       - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
+      - uses: ruby/setup-ruby@7dc18ff0ca6e3630d3f29d2a85ebf6cc27ae9d6c # v1.177.0
         with:
           bundler-cache: true # runs 'bundle install' and caches installed gems automatically
       - run: bundle exec rake signature:validate_yard