diff --git a/.github/workflows/check-branch-version.yml b/.github/workflows/check-branch-version.yml
index e2ac08e8b1..33a1536978 100644
--- a/.github/workflows/check-branch-version.yml
+++ b/.github/workflows/check-branch-version.yml
@@ -22,7 +22,7 @@ name: Check branch version
 
 jobs:
   check-branch-version:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v3
         with:
diff --git a/.github/workflows/execute-tests-and-promote.yml b/.github/workflows/execute-tests-and-promote.yml
index 06347fb4cb..9be3c5092a 100644
--- a/.github/workflows/execute-tests-and-promote.yml
+++ b/.github/workflows/execute-tests-and-promote.yml
@@ -10,7 +10,7 @@ name: job-promote-to-passed
 
 jobs:
   lint: ########################################################################
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       # See docker/base-python.docker.gen
       BASE_PYTHON_REPO: ${{ secrets.BASE_PYTHON_REPO }}
@@ -30,7 +30,7 @@ jobs:
         if: always()
 
   generate: ####################################################################
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       # See docker/base-python.docker.gen
       BASE_PYTHON_REPO: ${{ secrets.BASE_PYTHON_REPO }}
@@ -78,7 +78,7 @@ jobs:
         if: always()
 
   check-envoy-protos: ####################################################################
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       # See docker/base-python.docker.gen
       BASE_PYTHON_REPO: ${{ secrets.BASE_PYTHON_REPO }}
@@ -110,7 +110,7 @@ jobs:
         if: always()
 
   check-envoy-version: #########################################################
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       # See docker/base-python.docker.gen
       BASE_PYTHON_REPO: ${{ secrets.BASE_PYTHON_REPO }}
@@ -139,7 +139,7 @@ jobs:
 
   # Tests ######################################################################
   apiext-e2e:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       # See docker/base-python.docker.gen
       BASE_PYTHON_REPO: ${{ secrets.BASE_PYTHON_REPO }}
@@ -170,7 +170,7 @@ jobs:
         run: |
           go test -p 1 -parallel 1 -v -tags=apiext ./test/apiext/... -timeout 15m
   check-gotest:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       # See docker/base-python.docker.gen
       BASE_PYTHON_REPO: ${{ secrets.BASE_PYTHON_REPO }}
@@ -193,7 +193,7 @@ jobs:
       - uses: ./.github/actions/after-job
         if: always()
   check-pytest:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       # See docker/base-python.docker.gen
       BASE_PYTHON_REPO: ${{ secrets.BASE_PYTHON_REPO }}
@@ -249,7 +249,7 @@ jobs:
         with:
           jobname: check-pytest-${{ matrix.test }}
   check-pytest-unit:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       # See docker/base-python.docker.gen
       BASE_PYTHON_REPO: ${{ secrets.BASE_PYTHON_REPO }}
@@ -277,7 +277,7 @@ jobs:
       - uses: ./.github/actions/after-job
         if: always()
   check-chart:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       DEV_REGISTRY: ${{ secrets.DEV_REGISTRY }}
       # See docker/base-python.docker.gen
@@ -308,7 +308,7 @@ jobs:
         if: always()
 
   build: #######################################################################
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       DEV_REGISTRY: ${{ secrets.DEV_REGISTRY }}
       # See docker/base-python.docker.gen
@@ -347,7 +347,7 @@ jobs:
   ######################################################################
   ######################### CVE Scanning ###############################
   trivy-container-scan:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [build]
     steps:
       # upload of results to github uses git so checkout of code is needed
@@ -388,7 +388,7 @@ jobs:
       - check-pytest-unit
       - check-chart
       - trivy-container-scan
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: No-Op
         if: ${{ false }}
diff --git a/.github/workflows/generate-base-python.yml b/.github/workflows/generate-base-python.yml
index 77abd84f3a..e21037e078 100644
--- a/.github/workflows/generate-base-python.yml
+++ b/.github/workflows/generate-base-python.yml
@@ -6,7 +6,7 @@ on:
     - cron: '0 12 * * SUN'
 jobs:
   generate: ####################################################################
-      runs-on: ubuntu-latest
+      runs-on: ubuntu-24.04
       env:
         # See docker/base-python.docker.gen
         BASE_PYTHON_REPO: ${{ secrets.BASE_PYTHON_REPO }}
diff --git a/.github/workflows/k8s-e2e.yml b/.github/workflows/k8s-e2e.yml
index b47130fa99..94b1503069 100644
--- a/.github/workflows/k8s-e2e.yml
+++ b/.github/workflows/k8s-e2e.yml
@@ -8,7 +8,7 @@ name: k8s-e2e
 
 jobs:
   acceptance_tests:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       # See docker/base-python.docker.gen
       BASE_PYTHON_REPO: ${{ secrets.BASE_PYTHON_REPO }}
diff --git a/.github/workflows/promote-ga.yml b/.github/workflows/promote-ga.yml
index 967daa381c..00a28677af 100644
--- a/.github/workflows/promote-ga.yml
+++ b/.github/workflows/promote-ga.yml
@@ -5,7 +5,7 @@ name: promote-to-ga
       - 'v[0-9]+.[0-9]+.[0-9]+'
 jobs:
   promote-to-ga:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     name: promote-to-ga
     env:
       AWS_S3_BUCKET: ${{ secrets.AWS_S3_BUCKET }}
@@ -52,7 +52,7 @@ jobs:
       - uses: ./.github/actions/after-job
         if: always()
   create-gh-release:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [promote-to-ga]
     name: "Create GitHub release"
     env:
diff --git a/.github/workflows/promote-rc.yml b/.github/workflows/promote-rc.yml
index a14e9511b0..a7548b67eb 100644
--- a/.github/workflows/promote-rc.yml
+++ b/.github/workflows/promote-rc.yml
@@ -6,7 +6,7 @@ name: promote-to-rc
       - 'v[0-9]+.[0-9]+.[0-9]+-dev'
 jobs:
   promote-to-rc:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     name: promote-to-rc
     env:
       AWS_S3_BUCKET: ${{ secrets.AWS_S3_BUCKET }}
diff --git a/.github/workflows/publish-chart.yml b/.github/workflows/publish-chart.yml
index 76d3ea4d29..b3607af072 100644
--- a/.github/workflows/publish-chart.yml
+++ b/.github/workflows/publish-chart.yml
@@ -5,7 +5,7 @@ name: chart-publish
       - 'chart/v*'
 jobs:
   chart-publish:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     name: chart-publish
     env:
       AWS_S3_BUCKET: ${{ secrets.AWS_S3_BUCKET }}
@@ -45,7 +45,7 @@ jobs:
         if: always()
   chart-create-gh-release:
     if: ${{ ! contains(github.ref, '-') }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [chart-publish]
     name: "Create GitHub release"
     steps: