diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8480efd..599b555 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
       contents: read
       deployments: write
   verify:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - name: install shellcheck
@@ -52,6 +52,10 @@ jobs:
           if [ "$has_failed" != "false" ]; then
             exit 1
           fi
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+          cache: 'pip'
       - name: verify docs are up-to-date
         run: |
           python -m pip install "pyyaml==6.0.1"
@@ -65,7 +69,7 @@ jobs:
     needs:
       - verify
       - test
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     if: ${{ github.ref == format('refs/heads/{0}', github.event.repository.default_branch) }}
     permissions:
       contents: write
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 4ad8ee8..361f65a 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -5,7 +5,7 @@ on:
 
 jobs:
   test-actions:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     permissions:
       actions: read
       id-token: write
@@ -83,6 +83,11 @@ jobs:
       # configure localstack
       #
       ######################################################
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+          cache: 'pip'
       - name: install-localstack
         env:
           AWS_ACCOUNT_ID: ${{ steps.act-parse-config.outputs.accountId }}
@@ -201,7 +206,7 @@ jobs:
       - name: assert-slack-notify
         id: assert-slack-notify
         env:
-          ASSSERT_GOT: "${{ steps.act-slack-notify.outputs.payload }}"
+          ASSERT_GOT: "${{ steps.act-slack-notify.outputs.payload }}"
           ASSERT_EXPECTED_PAYLOAD_KEY: "channel"
         run: |
           echo "$ASSERT_GOT" | jq --exit-status --arg key "$ASSERT_EXPECTED_PAYLOAD_KEY" 'has($key)'