diff --git a/.github/workflows/ci-code-check.yml b/.github/workflows/ci-code-check.yml
index 7f0dbd485aabd..4339dc3fd0a47 100644
--- a/.github/workflows/ci-code-check.yml
+++ b/.github/workflows/ci-code-check.yml
@@ -15,7 +15,7 @@ env:
 
 jobs:
   code-check:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
 
     name: ${{ matrix.check == 'ts' && 'TypeScript' || 'Code Lint' }}
 
diff --git a/.github/workflows/ci-deploy-gh-pages.yml b/.github/workflows/ci-deploy-gh-pages.yml
index c0f1201196f61..2abc44825094a 100644
--- a/.github/workflows/ci-deploy-gh-pages.yml
+++ b/.github/workflows/ci-deploy-gh-pages.yml
@@ -9,7 +9,7 @@ on:
       - develop
 jobs:
   deploy-preview:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - uses: rharkor/caching-for-turbo@v1.6
diff --git a/.github/workflows/ci-test-e2e.yml b/.github/workflows/ci-test-e2e.yml
index 6c609f77dfdd6..12c5aea31216d 100644
--- a/.github/workflows/ci-test-e2e.yml
+++ b/.github/workflows/ci-test-e2e.yml
@@ -75,7 +75,7 @@ env:
 
 jobs:
   test:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     env:
       RC_DOCKERFILE: ${{ inputs.rc-dockerfile }}.${{ (matrix.mongodb-version == '7.0' && 'debian' && false) || 'alpine' }}
       RC_DOCKER_TAG: ${{ inputs.rc-docker-tag }}.${{ (matrix.mongodb-version == '7.0' && 'debian' && false) || 'alpine' }}
@@ -98,7 +98,7 @@ jobs:
 
       - name: Setup kernel limits
         run: |
-          sudo sysctl -w net.ipv4.ip_local_port_range="500   65535"
+          echo "500 65535" > sudo tee -a /proc/sys/net/ipv4/ip_local_port_range
           sudo sysctl -w net.ipv4.tcp_mem="383865   511820   2303190"
 
           echo fs.file-max=20000500 | sudo tee -a /etc/sysctl.conf
diff --git a/.github/workflows/ci-test-unit.yml b/.github/workflows/ci-test-unit.yml
index 9705ee17e2f8b..1f701d6d1135e 100644
--- a/.github/workflows/ci-test-unit.yml
+++ b/.github/workflows/ci-test-unit.yml
@@ -23,7 +23,7 @@ env:
 
 jobs:
   test:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
 
     name: Unit Tests
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c720817ed6a68..082e54787f63b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,7 +23,7 @@ env:
 jobs:
   release-versions:
     name: ⚙️ Variables Setup
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     outputs:
       release: ${{ steps.by-tag.outputs.release }}
       latest-release: ${{ steps.latest.outputs.latest-release }}
@@ -93,7 +93,7 @@ jobs:
 
   notify-draft-services:
     name: 🚀 Notify external services - draft
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     needs: [release-versions]
     steps:
       - uses: actions/checkout@v4
@@ -136,7 +136,7 @@ jobs:
   packages-build:
     name: 📦 Build Packages
     needs: [release-versions, notify-draft-services]
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Github Info
         run: |
@@ -187,7 +187,7 @@ jobs:
           include-hidden-files: true
 
   deploy-preview:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [release-versions, packages-build]
     steps:
       - uses: actions/checkout@v4
@@ -225,7 +225,7 @@ jobs:
   build:
     name: 📦 Meteor Build - coverage
     needs: [release-versions, packages-build]
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Collect Workflow Telemetry
@@ -256,7 +256,7 @@ jobs:
     name: 📦 Meteor Build - official
     needs: [tests-done, release-versions, packages-build]
     if: (github.event_name == 'release' || github.ref == 'refs/heads/develop')
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Collect Workflow Telemetry
@@ -286,7 +286,7 @@ jobs:
   # TODO: this should go away once upstream builds are fixed
   build-matrix-rust-bindings-for-alpine:
     name: Builds matrix rust bindings against alpine
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: check cache for matrix-rust-sdk-crypto-nodejs
         id: matrix-rust-sdk-crypto-nodejs
@@ -331,7 +331,7 @@ jobs:
   build-gh-docker-coverage:
     name: 🚢 Build Docker Images for Testing
     needs: [build, release-versions, build-matrix-rust-bindings-for-alpine]
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
 
     env:
       RC_DOCKERFILE: ${{ needs.release-versions.outputs.rc-dockerfile }}.${{ matrix.platform }}
@@ -376,7 +376,7 @@ jobs:
   build-gh-docker:
     name: 🚢 Build Docker Images for Production
     needs: [build-prod, release-versions]
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
 
     env:
       RC_DOCKERFILE: ${{ needs.release-versions.outputs.rc-dockerfile }}.${{ matrix.platform }}
@@ -563,7 +563,7 @@ jobs:
 
   tests-done:
     name: ✅ Tests Done
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     needs: [checks, test-unit, test-api, test-ui, test-api-ee, test-ui-ee, test-ui-ee-no-watcher]
     if: always()
     steps:
@@ -601,7 +601,7 @@ jobs:
 
   deploy:
     name: 🚀 Publish build assets
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     if: github.event_name == 'release' || github.ref == 'refs/heads/develop'
     needs: [build-gh-docker, release-versions]
 
@@ -655,7 +655,7 @@ jobs:
 
   docker-image-publish:
     name: 🚀 Publish Docker Image (main)
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     needs: [deploy, release-versions]
 
     strategy:
@@ -765,7 +765,7 @@ jobs:
 
   services-docker-image-publish:
     name: 🚀 Publish Docker Image (services)
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     needs: [deploy, release-versions]
 
     strategy:
@@ -854,7 +854,7 @@ jobs:
 
   notify-services:
     name: 🚀 Notify external services
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     needs:
       - services-docker-image-publish
       - docker-image-publish
diff --git a/.github/workflows/new-release.yml b/.github/workflows/new-release.yml
index 943edbfd370e6..2ede6e5ef04d6 100644
--- a/.github/workflows/new-release.yml
+++ b/.github/workflows/new-release.yml
@@ -22,7 +22,7 @@ env:
 
 jobs:
   new-release:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - uses: actions/checkout@v4
diff --git a/.github/workflows/pr-title-checker.yml b/.github/workflows/pr-title-checker.yml
index 4fe796118e16c..39e40ba3fd4cf 100644
--- a/.github/workflows/pr-title-checker.yml
+++ b/.github/workflows/pr-title-checker.yml
@@ -10,7 +10,7 @@ on:
 
 jobs:
   check:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: thehanimo/pr-title-checker@v1.4.3
         with:
diff --git a/.github/workflows/pr-update-description.yml b/.github/workflows/pr-update-description.yml
index d2d4e6bb99dca..9d8fb5dee34ad 100644
--- a/.github/workflows/pr-update-description.yml
+++ b/.github/workflows/pr-update-description.yml
@@ -9,7 +9,7 @@ concurrency: ${{ github.workflow }}-${{ github.ref }}
 
 jobs:
   update-pr:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     if: startsWith(github.head_ref, 'release-')
     steps:
       - name: Checkout Repo
diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 44f7a6d04e05e..8dd1402cc1dd9 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -13,7 +13,7 @@ env:
 jobs:
   release:
     name: Release
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v4
diff --git a/.github/workflows/release-candidate.yml b/.github/workflows/release-candidate.yml
index e1fc962f59228..42dbb908ee08e 100644
--- a/.github/workflows/release-candidate.yml
+++ b/.github/workflows/release-candidate.yml
@@ -4,7 +4,7 @@ on:
     - cron: '28 12 20 * *' # run at minute 28 to avoid the chance of delay due to high load on GH
 jobs:
   new-release:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
         with:
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 0ee119fe43aa8..89fb59d0c5845 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -1,11 +1,11 @@
 name: Close inactive issues
 on:
   schedule:
-    - cron: "0 */6 * * *"
+    - cron: '0 */6 * * *'
 
 jobs:
   close-issues:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       issues: write
     steps:
@@ -14,7 +14,7 @@ jobs:
           days-before-issue-stale: 14
           days-before-issue-close: 14
           any-of-labels: 'stat: need more info,stat: waiting response'
-          stale-issue-label: "stat: no response"
-          stale-issue-message: "This issue has been marked as stale because there has been no further activity in the last 10 days. If the issue remains stale for the next 4 days (a total of 14 days with no activity), then it will be assumed that the question has been resolved and the issue will be automatically closed."
-          close-issue-message: "This issue was closed because it has been inactive for 14 days since being marked as stale."
+          stale-issue-label: 'stat: no response'
+          stale-issue-message: 'This issue has been marked as stale because there has been no further activity in the last 10 days. If the issue remains stale for the next 4 days (a total of 14 days with no activity), then it will be assumed that the question has been resolved and the issue will be automatically closed.'
+          close-issue-message: 'This issue was closed because it has been inactive for 14 days since being marked as stale.'
           repo-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/update-version-durability.yml b/.github/workflows/update-version-durability.yml
index 0b3fb34c4e6fd..90d6f5c0d0572 100644
--- a/.github/workflows/update-version-durability.yml
+++ b/.github/workflows/update-version-durability.yml
@@ -11,7 +11,7 @@ on:
 
 jobs:
   update-versions:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - uses: actions/checkout@v4