diff --git a/.github/workflows/build-osx-wizmode.yml b/.github/workflows/build-osx-wizmode.yml
index bb29843c7..95af8a4f3 100644
--- a/.github/workflows/build-osx-wizmode.yml
+++ b/.github/workflows/build-osx-wizmode.yml
@@ -14,7 +14,7 @@ env:
 jobs:
   build:
     # custom libpng build fails a test on macos-latest (11.x)
-    runs-on: macos-10.15
+    runs-on: macos-13
     steps:
       - uses: actions/checkout@v2
         with:
diff --git a/.github/workflows/build-ubuntu-nonwizard.yml b/.github/workflows/build-ubuntu-nonwizard.yml
index ba7a23af6..dc1174917 100644
--- a/.github/workflows/build-ubuntu-nonwizard.yml
+++ b/.github/workflows/build-ubuntu-nonwizard.yml
@@ -12,7 +12,7 @@ jobs:
     # well on Windows or Mac.  You can convert this to a matrix build if you need
     # cross-platform coverage.
     # See: https://docs.github.com/en/free-pro-team@latest/actions/learn-github-actions/managing-complex-workflows#using-a-build-matrix
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     steps:
     - uses: actions/checkout@v2
diff --git a/.github/workflows/build-ubuntu-wizmode.yml b/.github/workflows/build-ubuntu-wizmode.yml
index f053810aa..9c2a34e27 100644
--- a/.github/workflows/build-ubuntu-wizmode.yml
+++ b/.github/workflows/build-ubuntu-wizmode.yml
@@ -12,7 +12,7 @@ jobs:
     # well on Windows or Mac.  You can convert this to a matrix build if you need
     # cross-platform coverage.
     # See: https://docs.github.com/en/free-pro-team@latest/actions/learn-github-actions/managing-complex-workflows#using-a-build-matrix
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     steps:
     - uses: actions/checkout@v2
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 5442eb3c5..9210acf9d 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -15,7 +15,7 @@ env:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     permissions:
       actions: read
       contents: read
@@ -24,7 +24,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'cpp', 'ruby' ]
+        language: [ 'cpp' ]
         # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
         # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
 
@@ -43,7 +43,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -71,6 +71,6 @@ jobs:
       run: cmake --build . --config $BUILD_TYPE -- -j 4
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v3
       with:
         category: "/language:${{matrix.language}}"