diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ba0000b..e74e680 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -6,6 +6,12 @@ on:
   pull_request:
   workflow_dispatch:
 
+# Opt into Node.js 24 for actions/* that still ship with Node 20 runtimes.
+# GitHub forces this default starting 2026-06-02 — pinning here avoids any
+# surprise red CI during the user's AFK window.
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
+
 jobs:
   build:
     name: ${{ matrix.os }}
@@ -31,10 +37,18 @@ jobs:
             libcurl4-openssl-dev mesa-common-dev ninja-build
 
       - name: Configure
-        run: cmake -S . -B build -DCMAKE_BUILD_TYPE=Release
+        shell: bash
+        run: |
+          EXTRA=""
+          if [ "$RUNNER_OS" = "Linux" ]; then EXTRA="-DBOMBO_LTO=OFF"; fi
+          cmake -S . -B build -DCMAKE_BUILD_TYPE=Release $EXTRA
 
       - name: Build
-        run: cmake --build build --config Release -j
+        shell: bash
+        run: |
+          JOBS="-j"
+          if [ "$RUNNER_OS" = "Linux" ]; then JOBS="-j 2"; fi
+          cmake --build build --config Release $JOBS
 
       - name: Test
         run: ctest --test-dir build --output-on-failure -C Release