Upgrade the Ubuntu-based runner used in CI to 24.04

.github/workflows/audit.yml

@@ -18,7 +18,7 @@ permissions: read-all
 jobs:
   vulnerabilities:
     name: Vulnerabilities
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
     - name: Checkout repository
       uses: actions/[email protected]

.github/workflows/check.yml

@@ -10,7 +10,7 @@ permissions: read-all
 jobs:
   build:
     name: Build
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
     - name: Checkout repository
       uses: actions/[email protected]
@@ -29,7 +29,7 @@ jobs:
       run: go run tasks.go build
   dogfeed:
     name: Dogfeed
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
     - test
     steps:
@@ -54,7 +54,7 @@ jobs:
         go run ./cmd/ghasum verify
   format:
     name: Format
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
     - build
     steps:
@@ -75,7 +75,7 @@ jobs:
       run: go run tasks.go format-check
   reproducible:
     name: Reproducible build
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
     - build
     steps:
@@ -96,7 +96,7 @@ jobs:
       run: go run tasks.go reproducible
   test:
     name: Test
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
     - build
     steps:
@@ -117,7 +117,7 @@ jobs:
       run: go run tasks.go coverage
   vet:
     name: Vet
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
     - build
     steps:

.github/workflows/codeql.yml

@@ -10,7 +10,7 @@ permissions: read-all
 jobs:
   go:
     name: Go
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     permissions:
       security-events: write # To upload CodeQL results
     steps:

.github/workflows/ghasum.yml

@@ -9,7 +9,7 @@ permissions: read-all
 jobs:
   update:
     name: Update gha.sum
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     if: ${{ github.actor == 'dependabot[bot]' }}
     permissions:
       contents: write # To push a commit

.github/workflows/publish.yml

@@ -9,7 +9,7 @@ permissions: read-all
 jobs:
   github-release:
     name: GitHub Release
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     permissions:
       contents: write # To create a GitHub Release
     steps:

.github/workflows/semgrep.yml

@@ -9,7 +9,7 @@ permissions: read-all
 jobs:
   semgrep:
     name: Semgrep
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     permissions:
       security-events: write # To upload SARIF results
     container: