diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 535298d8e..53458d02a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -86,7 +86,7 @@ env:
           name: Windows_X86-64_zip
     - config:
         name: Linux
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-22
         container: |
           {
             \"image\": \"ghcr.io/arduino/arduino-ide/linux:main\"
@@ -134,7 +134,7 @@ env:
 
 jobs:
   run-determination:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22
     outputs:
       result: ${{ steps.determination.outputs.result }}
     permissions: {}
@@ -160,7 +160,7 @@ jobs:
   build-type-determination:
     needs: run-determination
     if: needs.run-determination.outputs.result == 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22
     outputs:
       is-release: ${{ steps.determination.outputs.is-release }}
       is-nightly: ${{ steps.determination.outputs.is-nightly }}
@@ -201,7 +201,7 @@ jobs:
 
   select-targets:
     needs: build-type-determination
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22
     outputs:
       artifact-matrix: ${{ steps.assemble.outputs.artifact-matrix }}
       build-matrix: ${{ steps.assemble.outputs.build-matrix }}
@@ -312,7 +312,7 @@ jobs:
 
       - name: Checkout
         if: fromJSON(matrix.config.container) == null
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
 
       - name: Checkout
         # actions/checkout@v4 has dependency on a higher version of glibc than available in the Linux container.
@@ -438,7 +438,7 @@ jobs:
       - select-targets
       - build
     if: needs.select-targets.outputs.merge-channel-files == 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22
     permissions: {}
     steps:
       - name: Set environment variables
@@ -447,7 +447,7 @@ jobs:
           echo "CHANNEL_FILES_PATH=${{ runner.temp }}/channel-files" >> "$GITHUB_ENV"
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
 
       - name: Download staged-for-merge channel files artifact
         uses: actions/download-artifact@v3
@@ -501,7 +501,7 @@ jobs:
       - select-targets
       - build
     if: always() && needs.build.result != 'skipped'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22
 
     strategy:
       matrix:
@@ -524,12 +524,12 @@ jobs:
     needs:
       - build-type-determination
       - build
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22
     outputs:
       BODY: ${{ steps.changelog.outputs.BODY }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
         with:
           fetch-depth: 0 # To fetch all history for all branches and tags.
 
@@ -583,7 +583,7 @@ jobs:
       needs.changelog.result == 'success' &&
       needs.build-type-determination.outputs.publish-to-s3 == 'true' &&
       needs.build-type-determination.outputs.is-nightly == 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22
     steps:
       - name: Download [GitHub Actions]
         uses: actions/download-artifact@v3
@@ -615,7 +615,7 @@ jobs:
       ) &&
       needs.changelog.result == 'success' &&
       needs.build-type-determination.outputs.is-release == 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22
     steps:
       - name: Download [GitHub Actions]
         uses: actions/download-artifact@v3
@@ -658,7 +658,7 @@ jobs:
       - release
       - artifacts
     if: always() && needs.build.result != 'skipped'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22
 
     steps:
       - name: Remove unneeded job transfer artifact
diff --git a/.github/workflows/check-containers.yml b/.github/workflows/check-containers.yml
index 21e9c74ee..dfda6982f 100644
--- a/.github/workflows/check-containers.yml
+++ b/.github/workflows/check-containers.yml
@@ -40,7 +40,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
 
       - name: Build and push to local registry
         uses: docker/build-push-action@v5