codenameone · shai-almog · Sep 26, 2026 · Sep 25, 2026 · Sep 25, 2026
diff --git a/.github/workflows/admob-android-runtime-check.yml b/.github/workflows/admob-android-runtime-check.yml
@@ -21,7 +21,7 @@ concurrency:
 
 jobs:
   banner-measurement:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@v6

diff --git a/.github/workflows/ai-cn1lib-android-check.yml b/.github/workflows/ai-cn1lib-android-check.yml
@@ -22,7 +22,7 @@ on:
 
 jobs:
   android-native-check:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - name: Set up JDK 17
@@ -32,6 +32,11 @@ jobs:
           java-version: '17'
       - name: Set up Android SDK
         uses: android-actions/setup-android@v3
+        # The action's default list includes the legacy `tools` package, which
+        # cmdline-tools 16.0 (runner image ubuntu24/20260920) no longer offers,
+        # so `sdkmanager tools` exits 1. The next step installs what we need.
+        with:
+          packages: platform-tools
       - name: Install Android platform & ML Kit deps
         # sdkmanager + `yes |` would SIGPIPE under `set -o pipefail`, so feed
         # licence approvals via printf instead.

diff --git a/.github/workflows/ant.yml b/.github/workflows/ant.yml
@@ -23,7 +23,7 @@ concurrency:
 jobs:
   build-linux-jdk8:
 
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 45
 
     steps:

diff --git a/.github/workflows/archetype-smoke.yml b/.github/workflows/archetype-smoke.yml
@@ -48,7 +48,7 @@ concurrency:
 
 jobs:
   archetype-smoke:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 30
     steps:
       - uses: actions/checkout@v6

diff --git a/.github/workflows/blog-prose.yml b/.github/workflows/blog-prose.yml
@@ -34,7 +34,7 @@ jobs:
   gate:
     name: Blog prose gate
     if: github.event_name == 'pull_request'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Check out repository
         uses: actions/checkout@v6
@@ -202,7 +202,7 @@ jobs:
   # --------------------------------------------------------------------------- #
   report:
     if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Check out repository
         uses: actions/checkout@v6

diff --git a/.github/workflows/blog-syndication.yml b/.github/workflows/blog-syndication.yml
@@ -22,7 +22,7 @@ concurrency:
 
 jobs:
   syndicate:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Check out repository
         uses: actions/checkout@v6

diff --git a/.github/workflows/build-container.yml b/.github/workflows/build-container.yml
@@ -9,7 +9,7 @@ on:
 
 jobs:
   build-and-push:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: read
       packages: write

diff --git a/.github/workflows/car-android.yml b/.github/workflows/car-android.yml
@@ -56,7 +56,7 @@ jobs:
     name: Car Android Auto
     permissions:
       contents: read
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 60
     env:
       GITHUB_TOKEN: ${{ secrets.CN1SS_GH_TOKEN }}

diff --git a/.github/workflows/check-16k-page-alignment.yml b/.github/workflows/check-16k-page-alignment.yml
@@ -29,7 +29,7 @@ on:
 
 jobs:
   check-16k-page-alignment:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
 

diff --git a/.github/workflows/check-control-characters.yml b/.github/workflows/check-control-characters.yml
@@ -24,7 +24,7 @@ on:
 
 jobs:
   check-control-characters:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
 

diff --git a/.github/workflows/check-copyright-headers.yml b/.github/workflows/check-copyright-headers.yml
@@ -17,7 +17,7 @@ on:
 
 jobs:
   check-copyright-headers:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
         with:

diff --git a/.github/workflows/check-since-tags.yml b/.github/workflows/check-since-tags.yml
@@ -26,7 +26,7 @@ on:
 
 jobs:
   check-since-tags:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
 

diff --git a/.github/workflows/check-workflows.yml b/.github/workflows/check-workflows.yml
@@ -28,7 +28,7 @@ on:
 
 jobs:
   check-workflows:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
 

diff --git a/.github/workflows/cn1playground-language.yml b/.github/workflows/cn1playground-language.yml
@@ -19,7 +19,7 @@ permissions:
 jobs:
   language-smoke:
     name: Playground language smoke
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Check out repository

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -19,7 +19,7 @@ concurrency:
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 60
     permissions:
       security-events: write

diff --git a/.github/workflows/designer.yml b/.github/workflows/designer.yml
@@ -34,7 +34,7 @@ concurrency:
 
 jobs:
   build-designer:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 45
 
     steps:

diff --git a/.github/workflows/developer-guide-docs.yml b/.github/workflows/developer-guide-docs.yml
@@ -59,7 +59,7 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: write
       issues: write

diff --git a/.github/workflows/errorprone.yml b/.github/workflows/errorprone.yml
@@ -34,7 +34,7 @@ on:
 
 jobs:
   errorprone:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
 

diff --git a/.github/workflows/fidelity-desktop-native-ref.yml b/.github/workflows/fidelity-desktop-native-ref.yml
@@ -63,7 +63,7 @@ jobs:
   gnome-ref:
     if: ${{ inputs.targets == 'all' || inputs.targets == 'gnome' }}
     name: GNOME (GTK4 + libadwaita)
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 30
     env:
       CN1SS_FIDELITY_GOLDEN_SET: gnome-adwaita

diff --git a/.github/workflows/guibuilder.yml b/.github/workflows/guibuilder.yml
@@ -47,7 +47,7 @@ concurrency:
 
 jobs:
   guibuilder:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 60
     container: ghcr.io/codenameone/codenameone/pr-ci-container:latest
     defaults:

diff --git a/.github/workflows/health-android.yml b/.github/workflows/health-android.yml
@@ -47,7 +47,7 @@ jobs:
     name: Health Connect Android
     permissions:
       contents: read
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 60
     steps:
       - uses: actions/checkout@v6

diff --git a/.github/workflows/identity-stack.yml b/.github/workflows/identity-stack.yml
@@ -88,7 +88,7 @@ concurrency:
 jobs:
   linux-tests:
     name: Core tests, plugin & Android compile, sample javac
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     # Same container the main PR workflow uses; it ships JDK 8/17/21 and
     # cn1-binaries pre-staged at /opt/cn1-binaries.
     container: ghcr.io/codenameone/codenameone/pr-ci-container:latest
@@ -212,7 +212,7 @@ jobs:
 
   sample-secrets:
     name: Scan demo sample for accidental credentials
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     # 10 rather than 3. The scan itself is one grep over ten paths and takes
     # under a second; the three minutes went entirely to checking out a
     # repository this size, and the job was cancelled mid-checkout having done

diff --git a/.github/workflows/initializr-cn1-version-pr.yml b/.github/workflows/initializr-cn1-version-pr.yml
@@ -17,7 +17,7 @@ permissions:
 
 jobs:
   update-website-cn1-versions:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v6

diff --git a/.github/workflows/java-snippet-validation.yml b/.github/workflows/java-snippet-validation.yml
@@ -14,7 +14,7 @@ on:
 
 jobs:
   validate-snippets:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
         with:

diff --git a/.github/workflows/javadocs.yml b/.github/workflows/javadocs.yml
@@ -20,7 +20,7 @@ on:
 
 jobs:
   build-javadocs:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: write
     steps:

diff --git a/.github/workflows/javase-cef-ffmpeg-smoke.yml b/.github/workflows/javase-cef-ffmpeg-smoke.yml
@@ -48,7 +48,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest, macos-latest, windows-latest]
+        os: [ubuntu-24.04, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
 
     steps:

diff --git a/.github/workflows/jsport-barrier-lint.yml b/.github/workflows/jsport-barrier-lint.yml
@@ -25,7 +25,7 @@ name: JS port barrier-read lint
 jobs:
   barrier-lint:
     name: JS port canvas barrier-read lint
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - name: Run barrier-read linter

diff --git a/.github/workflows/linux-browser-link.yml b/.github/workflows/linux-browser-link.yml
@@ -9,7 +9,7 @@ jobs:
   browser-link:
     strategy:
       matrix:
-        runner: [ubuntu-latest, ubuntu-24.04-arm]
+        runner: [ubuntu-24.04, ubuntu-24.04-arm]
     runs-on: ${{ matrix.runner }}
     timeout-minutes: 10
     steps:

diff --git a/.github/workflows/linux-build-run.yml b/.github/workflows/linux-build-run.yml
@@ -1,7 +1,7 @@
 # Native Linux (GTK3) build + run pipeline. The Linux port builds natively on the
 # runner -- no cross-compile -- so each architecture both builds and runs the
 # binary. It runs on BOTH architectures GitHub hosts natively: x86_64
-# (ubuntu-latest) and arm64 (ubuntu-24.04-arm), giving the port the same two-arch
+# (ubuntu-24.04) and arm64 (ubuntu-24.04-arm), giving the port the same two-arch
 # screenshot coverage the native Windows port has.
 #
 # The hellocodenameone screenshot suite is compiled by the codenameone maven
@@ -92,7 +92,7 @@ jobs:
   # so both arch legs translate from these same classes.
   prepare-suite:
     name: build suite classes (x64)
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 60
     steps:
       - name: Check out repository
@@ -163,7 +163,7 @@ jobs:
       matrix:
         include:
           - arch: x64
-            runner: ubuntu-latest
+            runner: ubuntu-24.04
           - arch: arm64
             runner: ubuntu-24.04-arm
     steps:
@@ -471,7 +471,7 @@ jobs:
   build-run-musl:
     name: build + run suite (musl, Alpine x64)
     needs: prepare-suite
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - name: Download suite classes
@@ -554,7 +554,7 @@ jobs:
       !cancelled() &&
       (github.event_name == 'pull_request' || github.event_name == 'push' ||
       github.event_name == 'schedule' || github.event_name == 'workflow_dispatch')
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       # write, because this job publishes the normalized report to the
       # port-status-data branch itself (see the publish step below).

diff --git a/.github/workflows/material-icons-update.yml b/.github/workflows/material-icons-update.yml
@@ -17,7 +17,7 @@ permissions:
 
 jobs:
   update-material-icons:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Check out repository

diff --git a/.github/workflows/native-themes-sync.yml b/.github/workflows/native-themes-sync.yml
@@ -36,7 +36,7 @@ concurrency:
 
 jobs:
   rebuild-and-commit:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     container: ghcr.io/codenameone/codenameone/pr-ci-container:latest
     defaults:
       run:

diff --git a/.github/workflows/oss-traction.yml b/.github/workflows/oss-traction.yml
@@ -20,7 +20,7 @@ concurrency:
 
 jobs:
   snapshot:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Check out default branch
         uses: actions/checkout@v6

diff --git a/.github/workflows/parparvm-parallel-mark.yml b/.github/workflows/parparvm-parallel-mark.yml
@@ -111,7 +111,7 @@ jobs:
           # x64 as well, so a failure can be attributed to the architecture rather
           # than to the pool itself.
           - arch: x64
-            runner: ubuntu-latest
+            runner: ubuntu-24.04
             markers: 4
             cflags: '-DCN1_GC_MARK_THREADS=4'
     steps:

diff --git a/.github/workflows/parparvm-selfhost.yml b/.github/workflows/parparvm-selfhost.yml
@@ -50,7 +50,7 @@ jobs:
     if: >-
       github.event_name != 'pull_request' ||
       contains(github.event.pull_request.labels.*.name, 'selfhost')
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 120
     steps:
       - name: Check out repository

diff --git a/.github/workflows/parparvm-tests-windows.yml b/.github/workflows/parparvm-tests-windows.yml
@@ -746,7 +746,7 @@ jobs:
       needs.windows-port-screenshot.result != 'cancelled' &&
       needs.windows-port-screenshot.result != 'skipped' &&
       (github.event_name == 'pull_request' || github.event_name == 'push' || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch')
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: read
       pull-requests: write
@@ -847,7 +847,7 @@ jobs:
       needs.windows-port-screenshot-arm64.result != 'cancelled' &&
       needs.windows-port-screenshot-arm64.result != 'skipped' &&
       (github.event_name == 'pull_request' || github.event_name == 'push' || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch')
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: read
       pull-requests: write