From 853253e1202439713096357a6b7c62b6668c07c0 Mon Sep 17 00:00:00 2001
From: Jonathan Desrosiers <desrosj@users.noreply.github.com>
Date: Mon, 15 Sep 2025 11:06:29 -0400
Subject: [PATCH 1/6] Backport 60735 to 6.8

---
 tools/local-env/scripts/install.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/local-env/scripts/install.js b/tools/local-env/scripts/install.js
index 9b74f3f020751..a8d6612cd78d0 100644
--- a/tools/local-env/scripts/install.js
+++ b/tools/local-env/scripts/install.js
@@ -50,7 +50,7 @@ wait_on( {
 		process.exit( 1 );
 	} )
 	.then( () => {
-		wp_cli( 'db reset --yes' );
+		wp_cli( 'db reset --yes --defaults' );
 		const installCommand = process.env.LOCAL_MULTISITE === 'true'  ? 'multisite-install' : 'install';
 		wp_cli( `core ${ installCommand } --title="WordPress Develop" --admin_user=admin --admin_password=password --admin_email=test@test.com --skip-email --url=http://localhost:${process.env.LOCAL_PORT}` );
 	} )

From 3c70af7f12090b6d04fc7f7823266a2356d83b36 Mon Sep 17 00:00:00 2001
From: Jonathan Desrosiers <desrosj@users.noreply.github.com>
Date: Mon, 15 Sep 2025 20:58:11 -0400
Subject: [PATCH 2/6] Trigger all workflows to run

---
 .github/workflows/coding-standards.yml        |  2 +-
 .github/workflows/end-to-end-tests.yml        |  2 +-
 .github/workflows/javascript-tests.yml        |  2 +-
 .../workflows/local-docker-environment.yml    |  4 ++--
 .github/workflows/performance.yml             |  4 ++--
 .github/workflows/php-compatibility.yml       |  2 +-
 .github/workflows/phpunit-tests.yml           | 22 +++++++++----------
 .github/workflows/props-bot.yml               |  2 +-
 .github/workflows/pull-request-comments.yml   |  6 ++---
 .github/workflows/test-build-processes.yml    | 10 ++++-----
 .github/workflows/upgrade-develop-testing.yml |  4 ++--
 .github/workflows/upgrade-testing.yml         | 16 +++++++-------
 .github/workflows/workflow-lint.yml           |  2 +-
 13 files changed, 39 insertions(+), 39 deletions(-)

diff --git a/.github/workflows/coding-standards.yml b/.github/workflows/coding-standards.yml
index d7cf059b81bb6..72e5559324845 100644
--- a/.github/workflows/coding-standards.yml
+++ b/.github/workflows/coding-standards.yml
@@ -80,7 +80,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       actions: write
     needs: [ phpcs, jshint, slack-notifications ]
diff --git a/.github/workflows/end-to-end-tests.yml b/.github/workflows/end-to-end-tests.yml
index c9c34944cbc00..e7bc001f0ed40 100644
--- a/.github/workflows/end-to-end-tests.yml
+++ b/.github/workflows/end-to-end-tests.yml
@@ -84,7 +84,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       actions: write
     needs: [ e2e-tests, slack-notifications ]
diff --git a/.github/workflows/javascript-tests.yml b/.github/workflows/javascript-tests.yml
index e7a7dad1fc25f..ad453c9c84738 100644
--- a/.github/workflows/javascript-tests.yml
+++ b/.github/workflows/javascript-tests.yml
@@ -73,7 +73,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/local-docker-environment.yml b/.github/workflows/local-docker-environment.yml
index 616d37e19bba0..1098dc5bd6f4b 100644
--- a/.github/workflows/local-docker-environment.yml
+++ b/.github/workflows/local-docker-environment.yml
@@ -87,7 +87,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-24.04 ]
+        os: [ ubuntu-latest ]
         memcached: [ false, true ]
         php: ${{ fromJSON( needs.build-test-matrix.outputs.php-versions ) }}
         db-version: ${{ fromJSON( needs.build-test-matrix.outputs.mysql-versions ) }}
@@ -128,7 +128,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       actions: write
     needs: [ build-test-matrix, environment-tests-mysql, slack-notifications ]
diff --git a/.github/workflows/performance.yml b/.github/workflows/performance.yml
index 04d5c5bf81efe..14c77334fd8c5 100644
--- a/.github/workflows/performance.yml
+++ b/.github/workflows/performance.yml
@@ -50,7 +50,7 @@ permissions: {}
 jobs:
   determine-matrix:
     name: Determine Matrix
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     if: ${{ ( github.repository == 'WordPress/wordpress-develop' || ( github.event_name == 'pull_request' && github.actor != 'dependabot[bot]' ) ) && ! contains( github.event.before, '00000000' ) }}
     permissions: {}
     env:
@@ -145,7 +145,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/php-compatibility.yml b/.github/workflows/php-compatibility.yml
index 9471e9eeda3a9..d2ece24124778 100644
--- a/.github/workflows/php-compatibility.yml
+++ b/.github/workflows/php-compatibility.yml
@@ -67,7 +67,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/phpunit-tests.yml b/.github/workflows/phpunit-tests.yml
index ecb571f62bcc6..32aa130bc0b86 100644
--- a/.github/workflows/phpunit-tests.yml
+++ b/.github/workflows/phpunit-tests.yml
@@ -63,7 +63,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-24.04 ]
+        os: [ ubuntu-latest ]
         php: [ '7.2', '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.0', '8.4' ]
@@ -73,14 +73,14 @@ jobs:
 
         include:
           # Include jobs that test with memcached.
-          - os: ubuntu-24.04
+          - os: ubuntu-latest
             php: '8.3'
             db-type: 'mysql'
             db-version: '8.4'
             tests-domain: 'example.org'
             multisite: false
             memcached: true
-          - os: ubuntu-24.04
+          - os: ubuntu-latest
             php: '8.3'
             db-type: 'mysql'
             db-version: '8.4'
@@ -88,14 +88,14 @@ jobs:
             multisite: true
             memcached: true
           # Include jobs with a port on the test domain for both single and multisite.
-          - os: ubuntu-24.04
+          - os: ubuntu-latest
             php: '8.4'
             db-type: 'mysql'
             db-version: '8.4'
             tests-domain: 'example.org:8889'
             multisite: false
             memcached: false
-          - os: ubuntu-24.04
+          - os: ubuntu-latest
             php: '8.4'
             db-type: 'mysql'
             db-version: '8.4'
@@ -103,7 +103,7 @@ jobs:
             multisite: true
             memcached: false
           # Report test results to the Host Test Results.
-          - os: ubuntu-24.04
+          - os: ubuntu-latest
             db-type: 'mysql'
             db-version: '8.4'
             tests-domain: 'example.org'
@@ -134,7 +134,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-24.04 ]
+        os: [ ubuntu-latest ]
         php: [ '7.2', '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4' ]
         db-type: [ 'mariadb' ]
         db-version: [ '5.5', '10.3', '10.4', '10.5', '10.6', '10.11', '11.4' ]
@@ -143,13 +143,13 @@ jobs:
 
         include:
         # Include jobs that test with memcached.
-        - os: ubuntu-24.04
+        - os: ubuntu-latest
           php: '8.3'
           db-type: 'mariadb'
           db-version: '11.4'
           multisite: false
           memcached: true
-        - os: ubuntu-24.04
+        - os: ubuntu-latest
           php: '8.3'
           db-type: 'mariadb'
           db-version: '11.4'
@@ -184,7 +184,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-24.04 ]
+        os: [ ubuntu-latest ]
         php: [ '7.2', '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4' ]
         db-type: [ 'mysql', 'mariadb' ]
         db-version: [ '9.1', '11.6' ]
@@ -255,7 +255,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/props-bot.yml b/.github/workflows/props-bot.yml
index 339451011270a..474213062e44f 100644
--- a/.github/workflows/props-bot.yml
+++ b/.github/workflows/props-bot.yml
@@ -48,7 +48,7 @@ jobs:
   # - Removes the props-bot label, if necessary.
   props-bot:
     name: Generate a list of props
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       # The action needs permission `write` permission for PRs in order to add a comment.
       pull-requests: write
diff --git a/.github/workflows/pull-request-comments.yml b/.github/workflows/pull-request-comments.yml
index ea18e6be9184c..df060fc657f1b 100644
--- a/.github/workflows/pull-request-comments.yml
+++ b/.github/workflows/pull-request-comments.yml
@@ -22,7 +22,7 @@ permissions: {}
 jobs:
   # Comments on a pull request when the author is a first time contributor.
   post-welcome-message:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       issues: write
       pull-requests: write
@@ -80,7 +80,7 @@ jobs:
   # Leaves a comment on a pull request with a link to test the changes in a WordPress Playground instance.
   playground-details:
     name: Comment on a pull request with Playground details
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       issues: write
       pull-requests: write
@@ -170,7 +170,7 @@ jobs:
   # Manages comments reminding contributors to include a Trac ticket link when opening a pull request.
   trac-ticket-check:
     name: Manage Trac ticket reminders for pull requests
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       issues: write
       pull-requests: write
diff --git a/.github/workflows/test-build-processes.yml b/.github/workflows/test-build-processes.yml
index 72103ccf9037a..dda3ebec58431 100644
--- a/.github/workflows/test-build-processes.yml
+++ b/.github/workflows/test-build-processes.yml
@@ -55,16 +55,16 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-24.04, windows-2022 ]
+        os: [ ubuntu-latest, windows-2022 ]
         directory: [ 'src', 'build' ]
         include:
           # Only prepare artifacts for Playground once.
-          - os: ubuntu-24.04
+          - os: ubuntu-latest
             directory: 'build'
             save-build: true
             prepare-playground: ${{ github.event_name == 'pull_request' && true || '' }}
           # Test certificate build commands with Linux only.
-          - os: ubuntu-24.04
+          - os: ubuntu-latest
             test-certificates: true
 
     with:
@@ -107,7 +107,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-24.04, windows-2022 ]
+        os: [ ubuntu-latest, windows-2022 ]
         directory: [ 'src', 'build' ]
     with:
       os: ${{ matrix.os }}
@@ -154,7 +154,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/upgrade-develop-testing.yml b/.github/workflows/upgrade-develop-testing.yml
index 4ce4b6182c882..91e319287174d 100644
--- a/.github/workflows/upgrade-develop-testing.yml
+++ b/.github/workflows/upgrade-develop-testing.yml
@@ -59,7 +59,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-24.04' ]
+        os: [ 'ubuntu-latest' ]
         php: [ '7.2', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.4' ]
@@ -101,7 +101,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/upgrade-testing.yml b/.github/workflows/upgrade-testing.yml
index 386d4ba54777a..d00b4e29158ea 100644
--- a/.github/workflows/upgrade-testing.yml
+++ b/.github/workflows/upgrade-testing.yml
@@ -62,7 +62,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-24.04' ]
+        os: [ 'ubuntu-latest' ]
         php: [ '7.2', '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.0', '8.4', '9.1' ]
@@ -97,7 +97,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-24.04' ]
+        os: [ 'ubuntu-latest' ]
         php: [ '7.2', '7.4', '8.0', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.4' ]
@@ -125,7 +125,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-24.04' ]
+        os: [ 'ubuntu-latest' ]
         php: [ '7.2', '7.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.4' ]
@@ -157,7 +157,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-24.04' ]
+        os: [ 'ubuntu-latest' ]
         php: [ '8.0', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.4' ]
@@ -182,7 +182,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-24.04' ]
+        os: [ 'ubuntu-latest' ]
         php: [ '7.2', '7.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.4' ]
@@ -216,7 +216,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-24.04' ]
+        os: [ 'ubuntu-latest' ]
         php: [ '8.0', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.4' ]
@@ -240,7 +240,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-24.04' ]
+        os: [ 'ubuntu-latest' ]
         php: [ '7.2', '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.0', '8.4', '9.1' ]
@@ -285,7 +285,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/workflow-lint.yml b/.github/workflows/workflow-lint.yml
index 4ea1f8fa5a93c..5f0acea9ec000 100644
--- a/.github/workflows/workflow-lint.yml
+++ b/.github/workflows/workflow-lint.yml
@@ -57,7 +57,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       actions: write
     needs: [ slack-notifications ]

From 38f86433850fe4306ec08719100786133b09b9a6 Mon Sep 17 00:00:00 2001
From: Jonathan Desrosiers <desrosj@users.noreply.github.com>
Date: Mon, 15 Sep 2025 21:03:19 -0400
Subject: [PATCH 3/6] Undo upgrade testing change.

This workflow should only ever run in `trunk`.
---
 .github/workflows/upgrade-testing.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/upgrade-testing.yml b/.github/workflows/upgrade-testing.yml
index d00b4e29158ea..ac4098763abbf 100644
--- a/.github/workflows/upgrade-testing.yml
+++ b/.github/workflows/upgrade-testing.yml
@@ -62,7 +62,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-latest' ]
+        os: [ 'ubuntu-24.04' ]
         php: [ '7.2', '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.0', '8.4', '9.1' ]

From a401f55b8d3ca70969b97beedcd5879a47bf2457 Mon Sep 17 00:00:00 2001
From: John Blackbourn <johnbillion@git.wordpress.org>
Date: Wed, 6 Aug 2025 18:42:38 +0000
Subject: [PATCH 4/6] Build/Test Tools: Add some missing permissions to the
 GitHub Actions workflows.

These permissions are not required for a public repo but are required for a private repo, for example a private fork.

Props johnbillion, desrosj

See #63170

git-svn-id: https://develop.svn.wordpress.org/trunk@60612 602fd350-edb4-49c9-b593-d223f7449a82
---
 .github/workflows/performance.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/performance.yml b/.github/workflows/performance.yml
index 14c77334fd8c5..325271590597b 100644
--- a/.github/workflows/performance.yml
+++ b/.github/workflows/performance.yml
@@ -52,7 +52,8 @@ jobs:
     name: Determine Matrix
     runs-on: ubuntu-latest
     if: ${{ ( github.repository == 'WordPress/wordpress-develop' || ( github.event_name == 'pull_request' && github.actor != 'dependabot[bot]' ) ) && ! contains( github.event.before, '00000000' ) }}
-    permissions: {}
+    permissions:
+      actions: read
     env:
       TARGET_SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before }}
     outputs:

From d395eca299b08d19696175cd326a4acd06970920 Mon Sep 17 00:00:00 2001
From: John Blackbourn <johnbillion@git.wordpress.org>
Date: Mon, 11 Aug 2025 16:42:33 +0000
Subject: [PATCH 5/6] Build/Test Tools: Add some further missing permissions to
 the GitHub Actions workflows.

These permissions are not required for a public repo but are required for a private repo, for example a private fork.

Props johnbillion, desrosj

Follow-up to r60612.

See #63170

git-svn-id: https://develop.svn.wordpress.org/trunk@60624 602fd350-edb4-49c9-b593-d223f7449a82
---
 .github/workflows/check-built-files.yml       | 2 ++
 .github/workflows/upgrade-develop-testing.yml | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/check-built-files.yml b/.github/workflows/check-built-files.yml
index 04510bd84809f..588ae6700d5e9 100644
--- a/.github/workflows/check-built-files.yml
+++ b/.github/workflows/check-built-files.yml
@@ -44,3 +44,5 @@ jobs:
     # This prevents an unnecessary second run after changes are committed back because Dependabot always rebases and force pushes.
     if: ${{ github.repository == 'wordpress/wordpress-develop' && ( github.actor != 'dependabot[bot]' || github.event.commits < 2 ) }}
     uses: WordPress/wordpress-develop/.github/workflows/reusable-check-built-files.yml@trunk
+    permissions:
+      contents: read
diff --git a/.github/workflows/upgrade-develop-testing.yml b/.github/workflows/upgrade-develop-testing.yml
index 91e319287174d..89e4608649c40 100644
--- a/.github/workflows/upgrade-develop-testing.yml
+++ b/.github/workflows/upgrade-develop-testing.yml
@@ -56,6 +56,8 @@ jobs:
     uses: WordPress/wordpress-develop/.github/workflows/reusable-upgrade-testing.yml@trunk
     if: ${{ github.repository == 'WordPress/wordpress-develop' || ( github.event_name == 'pull_request' && github.actor != 'dependabot[bot]' ) }}
     needs: [ build ]
+    permissions:
+      contents: read
     strategy:
       fail-fast: false
       matrix:

From 978e3f09ad985fa7df1182c671e77eea56fa1d6e Mon Sep 17 00:00:00 2001
From: Jonathan Desrosiers <desrosj@users.noreply.github.com>
Date: Mon, 15 Sep 2025 21:25:31 -0400
Subject: [PATCH 6/6] Reverty ubuntu version change

---
 .github/workflows/coding-standards.yml        |  2 +-
 .github/workflows/end-to-end-tests.yml        |  2 +-
 .github/workflows/javascript-tests.yml        |  2 +-
 .../workflows/local-docker-environment.yml    |  4 ++--
 .github/workflows/performance.yml             |  4 ++--
 .github/workflows/php-compatibility.yml       |  2 +-
 .github/workflows/phpunit-tests.yml           | 22 +++++++++----------
 .github/workflows/props-bot.yml               |  2 +-
 .github/workflows/pull-request-comments.yml   |  6 ++---
 .github/workflows/test-build-processes.yml    | 10 ++++-----
 .github/workflows/upgrade-develop-testing.yml |  4 ++--
 .github/workflows/upgrade-testing.yml         | 14 ++++++------
 .github/workflows/workflow-lint.yml           |  2 +-
 13 files changed, 38 insertions(+), 38 deletions(-)

diff --git a/.github/workflows/coding-standards.yml b/.github/workflows/coding-standards.yml
index 72e5559324845..d7cf059b81bb6 100644
--- a/.github/workflows/coding-standards.yml
+++ b/.github/workflows/coding-standards.yml
@@ -80,7 +80,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       actions: write
     needs: [ phpcs, jshint, slack-notifications ]
diff --git a/.github/workflows/end-to-end-tests.yml b/.github/workflows/end-to-end-tests.yml
index e7bc001f0ed40..c9c34944cbc00 100644
--- a/.github/workflows/end-to-end-tests.yml
+++ b/.github/workflows/end-to-end-tests.yml
@@ -84,7 +84,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       actions: write
     needs: [ e2e-tests, slack-notifications ]
diff --git a/.github/workflows/javascript-tests.yml b/.github/workflows/javascript-tests.yml
index ad453c9c84738..e7a7dad1fc25f 100644
--- a/.github/workflows/javascript-tests.yml
+++ b/.github/workflows/javascript-tests.yml
@@ -73,7 +73,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/local-docker-environment.yml b/.github/workflows/local-docker-environment.yml
index 1098dc5bd6f4b..616d37e19bba0 100644
--- a/.github/workflows/local-docker-environment.yml
+++ b/.github/workflows/local-docker-environment.yml
@@ -87,7 +87,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-latest ]
+        os: [ ubuntu-24.04 ]
         memcached: [ false, true ]
         php: ${{ fromJSON( needs.build-test-matrix.outputs.php-versions ) }}
         db-version: ${{ fromJSON( needs.build-test-matrix.outputs.mysql-versions ) }}
@@ -128,7 +128,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       actions: write
     needs: [ build-test-matrix, environment-tests-mysql, slack-notifications ]
diff --git a/.github/workflows/performance.yml b/.github/workflows/performance.yml
index 325271590597b..4f8bbc645aae3 100644
--- a/.github/workflows/performance.yml
+++ b/.github/workflows/performance.yml
@@ -50,7 +50,7 @@ permissions: {}
 jobs:
   determine-matrix:
     name: Determine Matrix
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     if: ${{ ( github.repository == 'WordPress/wordpress-develop' || ( github.event_name == 'pull_request' && github.actor != 'dependabot[bot]' ) ) && ! contains( github.event.before, '00000000' ) }}
     permissions:
       actions: read
@@ -146,7 +146,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/php-compatibility.yml b/.github/workflows/php-compatibility.yml
index d2ece24124778..9471e9eeda3a9 100644
--- a/.github/workflows/php-compatibility.yml
+++ b/.github/workflows/php-compatibility.yml
@@ -67,7 +67,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/phpunit-tests.yml b/.github/workflows/phpunit-tests.yml
index 32aa130bc0b86..ecb571f62bcc6 100644
--- a/.github/workflows/phpunit-tests.yml
+++ b/.github/workflows/phpunit-tests.yml
@@ -63,7 +63,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-latest ]
+        os: [ ubuntu-24.04 ]
         php: [ '7.2', '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.0', '8.4' ]
@@ -73,14 +73,14 @@ jobs:
 
         include:
           # Include jobs that test with memcached.
-          - os: ubuntu-latest
+          - os: ubuntu-24.04
             php: '8.3'
             db-type: 'mysql'
             db-version: '8.4'
             tests-domain: 'example.org'
             multisite: false
             memcached: true
-          - os: ubuntu-latest
+          - os: ubuntu-24.04
             php: '8.3'
             db-type: 'mysql'
             db-version: '8.4'
@@ -88,14 +88,14 @@ jobs:
             multisite: true
             memcached: true
           # Include jobs with a port on the test domain for both single and multisite.
-          - os: ubuntu-latest
+          - os: ubuntu-24.04
             php: '8.4'
             db-type: 'mysql'
             db-version: '8.4'
             tests-domain: 'example.org:8889'
             multisite: false
             memcached: false
-          - os: ubuntu-latest
+          - os: ubuntu-24.04
             php: '8.4'
             db-type: 'mysql'
             db-version: '8.4'
@@ -103,7 +103,7 @@ jobs:
             multisite: true
             memcached: false
           # Report test results to the Host Test Results.
-          - os: ubuntu-latest
+          - os: ubuntu-24.04
             db-type: 'mysql'
             db-version: '8.4'
             tests-domain: 'example.org'
@@ -134,7 +134,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-latest ]
+        os: [ ubuntu-24.04 ]
         php: [ '7.2', '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4' ]
         db-type: [ 'mariadb' ]
         db-version: [ '5.5', '10.3', '10.4', '10.5', '10.6', '10.11', '11.4' ]
@@ -143,13 +143,13 @@ jobs:
 
         include:
         # Include jobs that test with memcached.
-        - os: ubuntu-latest
+        - os: ubuntu-24.04
           php: '8.3'
           db-type: 'mariadb'
           db-version: '11.4'
           multisite: false
           memcached: true
-        - os: ubuntu-latest
+        - os: ubuntu-24.04
           php: '8.3'
           db-type: 'mariadb'
           db-version: '11.4'
@@ -184,7 +184,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-latest ]
+        os: [ ubuntu-24.04 ]
         php: [ '7.2', '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4' ]
         db-type: [ 'mysql', 'mariadb' ]
         db-version: [ '9.1', '11.6' ]
@@ -255,7 +255,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/props-bot.yml b/.github/workflows/props-bot.yml
index 474213062e44f..339451011270a 100644
--- a/.github/workflows/props-bot.yml
+++ b/.github/workflows/props-bot.yml
@@ -48,7 +48,7 @@ jobs:
   # - Removes the props-bot label, if necessary.
   props-bot:
     name: Generate a list of props
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       # The action needs permission `write` permission for PRs in order to add a comment.
       pull-requests: write
diff --git a/.github/workflows/pull-request-comments.yml b/.github/workflows/pull-request-comments.yml
index df060fc657f1b..ea18e6be9184c 100644
--- a/.github/workflows/pull-request-comments.yml
+++ b/.github/workflows/pull-request-comments.yml
@@ -22,7 +22,7 @@ permissions: {}
 jobs:
   # Comments on a pull request when the author is a first time contributor.
   post-welcome-message:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       issues: write
       pull-requests: write
@@ -80,7 +80,7 @@ jobs:
   # Leaves a comment on a pull request with a link to test the changes in a WordPress Playground instance.
   playground-details:
     name: Comment on a pull request with Playground details
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       issues: write
       pull-requests: write
@@ -170,7 +170,7 @@ jobs:
   # Manages comments reminding contributors to include a Trac ticket link when opening a pull request.
   trac-ticket-check:
     name: Manage Trac ticket reminders for pull requests
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       issues: write
       pull-requests: write
diff --git a/.github/workflows/test-build-processes.yml b/.github/workflows/test-build-processes.yml
index dda3ebec58431..72103ccf9037a 100644
--- a/.github/workflows/test-build-processes.yml
+++ b/.github/workflows/test-build-processes.yml
@@ -55,16 +55,16 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-latest, windows-2022 ]
+        os: [ ubuntu-24.04, windows-2022 ]
         directory: [ 'src', 'build' ]
         include:
           # Only prepare artifacts for Playground once.
-          - os: ubuntu-latest
+          - os: ubuntu-24.04
             directory: 'build'
             save-build: true
             prepare-playground: ${{ github.event_name == 'pull_request' && true || '' }}
           # Test certificate build commands with Linux only.
-          - os: ubuntu-latest
+          - os: ubuntu-24.04
             test-certificates: true
 
     with:
@@ -107,7 +107,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-latest, windows-2022 ]
+        os: [ ubuntu-24.04, windows-2022 ]
         directory: [ 'src', 'build' ]
     with:
       os: ${{ matrix.os }}
@@ -154,7 +154,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/upgrade-develop-testing.yml b/.github/workflows/upgrade-develop-testing.yml
index 89e4608649c40..68ea5b085a299 100644
--- a/.github/workflows/upgrade-develop-testing.yml
+++ b/.github/workflows/upgrade-develop-testing.yml
@@ -61,7 +61,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-latest' ]
+        os: [ 'ubuntu-24.04' ]
         php: [ '7.2', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.4' ]
@@ -103,7 +103,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/upgrade-testing.yml b/.github/workflows/upgrade-testing.yml
index ac4098763abbf..386d4ba54777a 100644
--- a/.github/workflows/upgrade-testing.yml
+++ b/.github/workflows/upgrade-testing.yml
@@ -97,7 +97,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-latest' ]
+        os: [ 'ubuntu-24.04' ]
         php: [ '7.2', '7.4', '8.0', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.4' ]
@@ -125,7 +125,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-latest' ]
+        os: [ 'ubuntu-24.04' ]
         php: [ '7.2', '7.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.4' ]
@@ -157,7 +157,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-latest' ]
+        os: [ 'ubuntu-24.04' ]
         php: [ '8.0', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.4' ]
@@ -182,7 +182,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-latest' ]
+        os: [ 'ubuntu-24.04' ]
         php: [ '7.2', '7.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.4' ]
@@ -216,7 +216,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-latest' ]
+        os: [ 'ubuntu-24.04' ]
         php: [ '8.0', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.4' ]
@@ -240,7 +240,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ 'ubuntu-latest' ]
+        os: [ 'ubuntu-24.04' ]
         php: [ '7.2', '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.0', '8.4', '9.1' ]
@@ -285,7 +285,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       actions: write
     needs: [ slack-notifications ]
diff --git a/.github/workflows/workflow-lint.yml b/.github/workflows/workflow-lint.yml
index 5f0acea9ec000..4ea1f8fa5a93c 100644
--- a/.github/workflows/workflow-lint.yml
+++ b/.github/workflows/workflow-lint.yml
@@ -57,7 +57,7 @@ jobs:
 
   failed-workflow:
     name: Failed workflow tasks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       actions: write
     needs: [ slack-notifications ]