diff --git a/.github/workflows/dco-check.yml b/.github/workflows/dco-check.yml
index a525400..a1a24aa 100644
--- a/.github/workflows/dco-check.yml
+++ b/.github/workflows/dco-check.yml
@@ -9,7 +9,7 @@ permissions:
 jobs:
   check-dco:
     name: Check DCO
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4.2.2
         with:
diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
index 2473de6..15ad300 100644
--- a/.github/workflows/dependabot-automerge.yml
+++ b/.github/workflows/dependabot-automerge.yml
@@ -5,7 +5,7 @@ on:
 
 jobs:
   dependabot-automerge:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     permissions:
       contents: write
diff --git a/.github/workflows/reviewdog.yml b/.github/workflows/reviewdog.yml
index f476ee0..13192af 100644
--- a/.github/workflows/reviewdog.yml
+++ b/.github/workflows/reviewdog.yml
@@ -7,7 +7,7 @@ jobs:
   misspell:
     if: ${{ github.event.action != 'closed' }}
     name: Typos
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     permissions:
       contents: read
@@ -23,7 +23,7 @@ jobs:
   actionlint:
     if: ${{ github.event.action != 'closed' }}
     name: Actionlint
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     permissions:
       contents: read
@@ -39,7 +39,7 @@ jobs:
   biome:
     if: ${{ github.event.action != 'closed' }}
     name: 'Typescript: Biome'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     permissions:
       contents: read
@@ -70,7 +70,7 @@ jobs:
   standardrb:
     if: ${{ github.event.action != 'closed' }}
     name: 'Ruby: Standard'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     permissions:
       contents: read
@@ -96,7 +96,7 @@ jobs:
   credo:
     if: ${{ github.event.action != 'closed' }}
     name: 'Elixir: Credo'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     permissions:
       contents: read
diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
index f18d83d..b19c71e 100644
--- a/.github/workflows/ruby.yml
+++ b/.github/workflows/ruby.yml
@@ -13,7 +13,7 @@ permissions:
 jobs:
   lint:
     name: Ruby Lint
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     steps:
       - uses: actions/checkout@v4.2.2
@@ -42,9 +42,7 @@ jobs:
           - rack_2
           - rack_3
         os:
-          - ubuntu-20.04
           - ubuntu-22.04
-          - ubuntu-24.04
         ruby:
           - '2.7'
           - '3.0'
@@ -78,52 +76,6 @@ jobs:
             bundle exec bin/app-identity-suite-ruby run --stdin --strict
         working-directory: ./ruby
 
-  required-macos:
-    name: Ruby ${{ matrix.ruby }} - ${{ matrix.gemfile }} - ${{ matrix.os }}
-
-    strategy:
-      fail-fast: false
-      matrix:
-        gemfile:
-          - rack_1
-          - rack_2
-          - rack_3
-        os:
-          - macos-13
-          - macos-14
-          - macos-15
-        ruby:
-          - '2.7'
-          - '3.0'
-          - '3.1'
-          - '3.2'
-          - '3.3'
-          - '3.4'
-
-    runs-on: ${{ matrix.os }}
-
-    env:
-      BUNDLE_GEMFILE: ${{ github.workspace }}/ruby/gemfiles/${{ matrix.gemfile }}.gemfile
-
-    steps:
-      - uses: actions/checkout@v4.2.2
-        with:
-          persist-credentials: false
-
-      - uses: ruby/setup-ruby@v1.207.0
-        with:
-          ruby-version: ${{ matrix.ruby }}
-          bundler-cache: true
-          working-directory: ./ruby
-
-      - run: bundle exec ruby -S rake test --trace
-        working-directory: ./ruby
-
-      - run: >
-          bundle exec bin/app-identity-suite-ruby generate --stdout |
-            bundle exec bin/app-identity-suite-ruby run --stdin --strict
-        working-directory: ./ruby
-
   ruby-head-optional:
     name: Ruby ${{ matrix.ruby }} - ${{ matrix.gemfile }} - ${{ matrix.os }} (optional)
 
@@ -137,49 +89,7 @@ jobs:
         ruby:
           - head
         os:
-          - macos-latest
-          - ubuntu-latest
-
-    continue-on-error: true
-    runs-on: ${{ matrix.os }}
-
-    env:
-      BUNDLE_GEMFILE: ${{ github.workspace }}/ruby/gemfiles/${{ matrix.gemfile }}.gemfile
-
-    steps:
-      - uses: actions/checkout@v4.2.2
-        with:
-          persist-credentials: false
-
-      - uses: ruby/setup-ruby@v1.207.0
-        with:
-          ruby-version: ${{ matrix.ruby }}
-          bundler-cache: true
-          working-directory: ./ruby
-
-      - run: bundle exec ruby -S rake test --trace
-        working-directory: ./ruby
-
-      - run: >
-          bundle exec bin/app-identity-suite-ruby generate --stdout |
-            bundle exec bin/app-identity-suite-ruby run --stdin --strict
-        working-directory: ./ruby
-
-  jruby-optional:
-    name: Ruby ${{ matrix.ruby }} - ${{ matrix.gemfile }} - ${{ matrix.os }} (optional)
-
-    strategy:
-      fail-fast: false
-      matrix:
-        gemfile:
-          - rack_1
-          - rack_2
-          - rack_3
-        ruby:
-          - jruby
-          - jruby-head
-        os:
-          - ubuntu-latest
+          - ubuntu-22.04
 
     continue-on-error: true
     runs-on: ${{ matrix.os }}
diff --git a/.github/workflows/typescript.yml b/.github/workflows/typescript.yml
index 0cd2b88..ea89c2d 100644
--- a/.github/workflows/typescript.yml
+++ b/.github/workflows/typescript.yml
@@ -15,7 +15,7 @@ jobs:
       fail-fast: true
       matrix:
         os:
-          - ubuntu-latest
+          - ubuntu-22.04
         node:
           - 20
           - 22
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 6ac8ef5..fc86568 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   zizmor:
     name: zizmor latest via Cargo
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       security-events: write
       # required for workflows in private repositories