[engsys] Pin runner images

.github/workflows/SDK-Suppressions-Label.yaml

@@ -6,11 +6,11 @@ on:
       - main
       - RPSaaSMaster
       - release*
-  
+
 jobs:
   process-sdk-suppressions-labels:
     name: Sdk Suppressions
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: read
     steps:
@@ -56,7 +56,7 @@ jobs:
           GITHUB_PULL_REQUEST_LABELS: ${{ steps.fetch-pullRequest-context.outputs.prLabels }}
         run: |
           node eng/tools/sdk-suppressions/cmd/sdk-suppressions-label.js HEAD^ HEAD "$GITHUB_PULL_REQUEST_CHANGE_FILES" "$GITHUB_PULL_REQUEST_LABELS"
-          
+
           OUTPUT=$(cat $OUTPUT_FILE)
           echo "Script output labels: $OUTPUT"
 
@@ -74,7 +74,7 @@ jobs:
           done
 
       # No Action or Add/Remove label ​​according to step run-suppressions-script output
-      # e.g. 
+      # e.g.
       #     If the output of the step does not include the BreakingChange-Go-Sdk-Suppression, no action will be taken.
       #     If the step's output is "BreakingChange-Go-Sdk-Suppression='true'", the label "BreakingChange-Go-Sdk-Suppression" will be applied to the PR.
       #     If the step's output is "BreakingChange-Go-Sdk-Suppression='false'", the label "BreakingChange-Go-Sdk-Suppression" will be removed from the PR.
@@ -84,21 +84,21 @@ jobs:
         with:
           name: "BreakingChange-Go-Sdk-Suppression"
           value: "${{ steps.run-suppressions-script.outputs.BreakingChange-Go-Sdk-Suppression == 'true' }}"
-          
+
       - uses: ./.github/actions/add-label-artifact
         name: Upload artifact with results java
         if: ${{ steps.run-suppressions-script.outputs.BreakingChange-Java-Sdk-Suppression }}
         with:
           name: "BreakingChange-Java-Sdk-Suppression"
           value: "${{ steps.run-suppressions-script.outputs.BreakingChange-Java-Sdk-Suppression == 'true' }}"
-          
+
       - uses: ./.github/actions/add-label-artifact
         name: Upload artifact with results js
         if: ${{ steps.run-suppressions-script.outputs.BreakingChange-JavaScript-Sdk-Suppression }}
         with:
           name: "BreakingChange-JavaScript-Sdk-Suppression"
           value: "${{ steps.run-suppressions-script.outputs.BreakingChange-JavaScript-Sdk-Suppression == 'true' }}"
-          
+
       - uses: ./.github/actions/add-label-artifact
         name: Upload artifact with results python
         if: ${{ steps.run-suppressions-script.outputs.BreakingChange-Python-Sdk-Suppression }}

.github/workflows/_reusable-eng-tools-test.yaml

@@ -24,15 +24,15 @@ jobs:
   test:
     strategy:
       matrix:
-        os: [ubuntu-latest, windows-latest]
+        os: [ubuntu, windows]
         node-version: [18, 22]
         exclude:
-          - os: ubuntu-latest
+          - os: ubuntu
             node-version: 22
-          - os: windows-latest
+          - os: windows
             node-version: 18
 
-    runs-on: ${{ matrix.os }}
+    runs-on: ${{ fromJSON('{"ubuntu":"ubuntu-24.04", "windows":"windows-2022"}')[matrix.os] }}
 
     steps:
       - if: runner.os == 'Windows'
@@ -63,7 +63,7 @@ jobs:
       - run: npm run prettier
         if: inputs.prettier == true
         shell: pwsh
-        working-directory: ./eng/tools/${{ inputs.package }}        
+        working-directory: ./eng/tools/${{ inputs.package }}
 
       - run: npm run test:ci
         shell: pwsh

.github/workflows/protected-files.yaml

@@ -10,7 +10,7 @@ jobs:
   protected-files:
     name: Protected Files
 
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       # Since check is required, the job must pass instead of being skipped

.github/workflows/spelling-all.yaml

@@ -14,7 +14,7 @@ on:
 jobs:
   spellcheck:
     name: SpellCheck
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout repository

.github/workflows/spelling.yaml

@@ -5,7 +5,7 @@ on: pull_request
 jobs:
   spellcheck:
     name: SpellCheck
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout repository

.github/workflows/typespec-requirement.yaml

@@ -6,28 +6,27 @@ jobs:
   TypeSpec-Requirement:
     name: TypeSpec Requirement
 
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
-    - uses: actions/checkout@v4
-      with:
-        # Required since "HEAD^" is passed to TypeSpec-Requirement.ps1
-        fetch-depth: 2
-
-    - name: Setup Node and run `npm ci`
-      uses: ./.github/actions/setup-node-npm-ci
-
-    - run: |
-        eng/scripts/TypeSpec-Requirement.ps1 `
-          -BaseCommitish HEAD^ `
-          -TargetCommitish HEAD `
-      id: tsr-ps1
-      shell: pwsh
-
-    # Always add label artifact, even if "brownfield=false", to ensure label is removed when necessary
-    - uses: ./.github/actions/add-label-artifact
-      name: Upload artifact with results
-      with:
-        name: "brownfield"
-        value: "${{ steps.tsr-ps1.outputs.brownfield == 'true' }}"
-
+      - uses: actions/checkout@v4
+        with:
+          # Required since "HEAD^" is passed to TypeSpec-Requirement.ps1
+          fetch-depth: 2
+
+      - name: Setup Node and run `npm ci`
+        uses: ./.github/actions/setup-node-npm-ci
+
+      - run: |
+          eng/scripts/TypeSpec-Requirement.ps1 `
+            -BaseCommitish HEAD^ `
+            -TargetCommitish HEAD `
+        id: tsr-ps1
+        shell: pwsh
+
+      # Always add label artifact, even if "brownfield=false", to ensure label is removed when necessary
+      - uses: ./.github/actions/add-label-artifact
+        name: Upload artifact with results
+        with:
+          name: "brownfield"
+          value: "${{ steps.tsr-ps1.outputs.brownfield == 'true' }}"

.github/workflows/typespec-validation-all.yaml

@@ -28,7 +28,7 @@ on:
 
   schedule:
     # Run 4x/day
-    - cron: '0 0,6,12,18 * * *'
+    - cron: "0 0,6,12,18 * * *"
 
   workflow_dispatch:
 
@@ -53,7 +53,7 @@ jobs:
         # total-shards must be an accurate count of the number of shards
         total-shards: [3]
 
-    runs-on: ${{ matrix.os }}-latest
+    runs-on: ${{ fromJSON('{"ubuntu":"ubuntu-24.04", "windows":"windows-2022"}')[matrix.os] }}
 
     steps:
       - name: Enable git long paths
@@ -67,7 +67,7 @@ jobs:
 
       - name: Setup Node and run `npm ci`
         uses: ./.github/actions/setup-node-npm-ci
-        
+
       - name: Validate All Specs
         run: |
           # Keep processing when errors are written. Nonzero exit will mark the 

.github/workflows/typespec-validation.yaml

@@ -5,21 +5,21 @@ on: pull_request
 jobs:
   typespec-validation:
     name: TypeSpec Validation
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
-    - uses: actions/checkout@v4
-      with:
-        fetch-depth: 2
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 2
 
-    - name: Setup Node and run `npm ci`
-      uses: ./.github/actions/setup-node-npm-ci
+      - name: Setup Node and run `npm ci`
+        uses: ./.github/actions/setup-node-npm-ci
 
-    - name: Validate Impacted Specs
-      run: |
-        # Keep processing when errors are written. Nonzero exit will mark the 
-        # step as failed. 
-        $ErrorActionPreference = 'Continue'
+      - name: Validate Impacted Specs
+        run: |
+          # Keep processing when errors are written. Nonzero exit will mark the 
+          # step as failed. 
+          $ErrorActionPreference = 'Continue'
 
-        ./eng/scripts/TypeSpec-Validation.ps1 -GitClean -Verbose
-      shell: pwsh
+          ./eng/scripts/TypeSpec-Validation.ps1 -GitClean -Verbose
+        shell: pwsh

.github/workflows/update-labels.yaml

@@ -37,18 +37,18 @@ jobs:
       contents: read
       pull-requests: write
 
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
-    - uses: actions/checkout@v4
-      with:
-        sparse-checkout: |
-          .github
+      - uses: actions/checkout@v4
+        with:
+          sparse-checkout: |
+            .github
 
-    - name: Update Labels
-      uses: ./.github/actions/update-labels
-      with:
-        owner: ${{ inputs.owner }}
-        repo: ${{ inputs.repo }}
-        issue_number: ${{ inputs.issue_number }}
-        run_id: ${{ inputs.run_id }}
+      - name: Update Labels
+        uses: ./.github/actions/update-labels
+        with:
+          owner: ${{ inputs.owner }}
+          repo: ${{ inputs.repo }}
+          issue_number: ${{ inputs.issue_number }}
+          run_id: ${{ inputs.run_id }}