diff --git a/.github/workflows/alpine_builds.yml b/.github/workflows/alpine_builds.yml
index 6f160c4b..68bd5ff6 100644
--- a/.github/workflows/alpine_builds.yml
+++ b/.github/workflows/alpine_builds.yml
@@ -16,7 +16,7 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     container: alpine:latest
     strategy:
       fail-fast: false
diff --git a/.github/workflows/bsd_builds.yml b/.github/workflows/bsd_builds.yml
index 3a1285dd..43c0feb7 100644
--- a/.github/workflows/bsd_builds.yml
+++ b/.github/workflows/bsd_builds.yml
@@ -14,7 +14,7 @@ on:
 jobs:
   build:
     if: github.repository == 'Yubico/libfido2'
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:
diff --git a/.github/workflows/cifuzz_oss.yml b/.github/workflows/cifuzz_oss.yml
index 5835bb1f..d14b3232 100644
--- a/.github/workflows/cifuzz_oss.yml
+++ b/.github/workflows/cifuzz_oss.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   fuzzing:
     if: github.repository == 'Yubico/libfido2'
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index a3a8d54d..56b4d5e7 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -22,7 +22,7 @@ permissions:
 jobs:
   codeql-build:
     if: github.repository == 'Yubico/libfido2'
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
     - name: checkout
       uses: actions/checkout@v4
diff --git a/.github/workflows/linux_builds.yml b/.github/workflows/linux_builds.yml
index 2ed553a7..2ad65e02 100644
--- a/.github/workflows/linux_builds.yml
+++ b/.github/workflows/linux_builds.yml
@@ -21,17 +21,18 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - { os: ubuntu-20.04, cc: gcc-8 }
-          - { os: ubuntu-22.04, cc: gcc-9 }
+          - { os: ubuntu-20.04, cc: gcc-9 }
           - { os: ubuntu-22.04, cc: gcc-10 }
           - { os: ubuntu-22.04, cc: gcc-11 }
-          - { os: ubuntu-22.04, cc: gcc-12 }
-          - { os: ubuntu-22.04, cc: clang-15 }
+          - { os: ubuntu-24.04, cc: gcc-12 }
+          - { os: ubuntu-24.04, cc: gcc-13 }
           - { os: ubuntu-22.04, cc: clang-16 }
           - { os: ubuntu-22.04, cc: clang-17 }
-          - { os: ubuntu-22.04, cc: clang-18 }
+          - { os: ubuntu-24.04, cc: clang-18 }
+          - { os: ubuntu-24.04, cc: clang-19 }
           - { os: ubuntu-20.04, cc: i686-w64-mingw32-gcc-9 }
           - { os: ubuntu-22.04, cc: i686-w64-mingw32-gcc-10 }
+          - { os: ubuntu-24.04, cc: i686-w64-mingw32-gcc-11 }
     steps:
     - uses: actions/checkout@v4
     - name: dependencies
diff --git a/.github/workflows/linux_fuzz.yml b/.github/workflows/linux_fuzz.yml
index f98cac7a..4d398163 100644
--- a/.github/workflows/linux_fuzz.yml
+++ b/.github/workflows/linux_fuzz.yml
@@ -20,7 +20,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-22.04 ]
+        os: [ ubuntu-24.04 ]
         cc: [ clang-18 ]
         sanitizer: [ asan, msan ]
     steps:
diff --git a/.github/workflows/openssl3.yml b/.github/workflows/openssl3.yml
index 32b6d3f5..41915613 100644
--- a/.github/workflows/openssl3.yml
+++ b/.github/workflows/openssl3.yml
@@ -21,12 +21,12 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - os: ubuntu-22.04
-            cc: gcc-12
-          - os: ubuntu-22.04
+          - os: ubuntu-24.04
+            cc: gcc-13
+          - os: ubuntu-24.04
             cc: clang-18
-          - os: ubuntu-22.04
-            cc: i686-w64-mingw32-gcc-10
+          - os: ubuntu-24.04
+            cc: i686-w64-mingw32-gcc-11
     steps:
     - uses: actions/checkout@v4
     - name: dependencies
diff --git a/.github/workflows/shellcheck.yml b/.github/workflows/shellcheck.yml
index f89e3375..cdda760a 100644
--- a/.github/workflows/shellcheck.yml
+++ b/.github/workflows/shellcheck.yml
@@ -16,7 +16,7 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v4
     - name: dependencies