Develop

.github/workflows/codeql.yml

@@ -37,7 +37,7 @@ jobs:
     #   - https://gh.io/using-larger-runners (GitHub.com only)
     # Consider using larger runners or machines with greater resources
     # for possible analysis time improvements.
-    runs-on: ${{ (matrix.language == 'swift' && 'macos-14') || 'ubuntu-24.04' }}
+    runs-on: ${{ (matrix.language == 'swift' && 'macos-26') || 'ubuntu-26.04' }}
     timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
     permissions:
       # required for all workflows

.github/workflows/docker-image.yml

@@ -16,7 +16,7 @@ env:
 jobs:
   build:
     name: "Build Docker images"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 

.github/workflows/dotnet-lint.yml

@@ -20,8 +20,16 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: ["windows-2022", "windows-2025", "ubuntu-24.04", "macos-14"]
-        dotnet-version: [9.0.x, 10.0.x]
+        os:
+          - "windows-2022"
+          - "windows-2025"
+          - "ubuntu-24.04"
+          - "ubuntu-26.04"
+          - "macos-15"
+          - "macos-15-intel"
+          - "macos-26"
+          - "macos-26-intel"
+        dotnet-version: [8.0.x, 9.0.x, 10.0.x]
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7

.github/workflows/dotnet-test.yml

@@ -20,15 +20,38 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: ["windows-2022", "windows-2025", "ubuntu-24.04", "macos-14"]
-        dotnet-version: [9.0.x, 10.0.x]
+        os:
+          - "windows-2022"
+          - "windows-2025"
+          - "ubuntu-24.04"
+          - "ubuntu-26.04"
+          - "macos-15"
+          - "macos-15-intel"
+          - "macos-26"
+          - "macos-26-intel"
+        dotnet-version: [8.0.x, 9.0.x, 10.0.x]
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - name: Setup .NET ${{ matrix.dotnet-version }}
+      - id: setup-dotnet
+        name: Setup .NET ${{ matrix.dotnet-version }}
         uses: actions/setup-dotnet@v6
         with:
           dotnet-version: ${{ matrix.dotnet-version }}
+      # FIX: Dynamically generate global.json so the CLI doesn't default
+      # to the highest pre-installed version
+      - name: Enforce Matrix .NET SDK Version
+        shell: bash
+        run: |
+          cat <<'EOF' > ./global.json
+          {
+            "sdk": {
+              "version": "${{ steps.setup-dotnet.outputs.dotnet-version }}",
+              "rollForward": "latestPatch"
+            }
+          }
+          EOF
+
       - name: Tooling check
         run: >
           dotnet --version

.github/workflows/gitleaks.yml

@@ -19,7 +19,7 @@ on: # yamllint disable-line rule:truthy
 jobs:
   scan:
     name: gitleaks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:

.github/workflows/markdown-lint.yml

@@ -19,7 +19,7 @@ permissions:
 jobs:
   markdownlint:
     name: Markdown Lint
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
 
     steps:
       - name: Checkout repository

.github/workflows/yamllint.yml

@@ -22,12 +22,9 @@ jobs:
         with:
           python-version: 3.14
 
-      - name: Install pipenv
-        run: >
-          sudo apt install pipenv
       - name: Install yamllint
-        run: >
-          pipenv sync --dev
+        run: |
+          pip install --only-binary :all: yamllint==1.38.0
 
       - name: Lint YAML files
         run: >