From 9292033bdb38560770fad69a6c752c24db467b81 Mon Sep 17 00:00:00 2001
From: Derek Miller <1340081+derek-miller@users.noreply.github.com>
Date: Thu, 15 Oct 2026 11:22:56 -0500
Subject: [PATCH 1/2] ci: pin runners to ubuntu-26.04

---
 .github/workflows/build.yml   | 8 ++++----
 .github/workflows/release.yml | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c583a6f..9561a91 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -12,7 +12,7 @@ concurrency:
 
 jobs:
   check:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     name: Check
     steps:
       - uses: actions/checkout@v4
@@ -50,7 +50,7 @@ jobs:
 
   test:
     needs: check
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     continue-on-error: false
     strategy:
       fail-fast: true
@@ -101,7 +101,7 @@ jobs:
   # to OpenSSL.
   openssl-matrix:
     needs: check
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     strategy:
       # Report every binding's result; one failing version must not mask another.
       fail-fast: false
@@ -177,7 +177,7 @@ jobs:
 
   build:
     needs: [test, openssl-matrix]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     name: Build Combined Module
     steps:
       - uses: actions/checkout@v4
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f4cf9fd..5ca96ef 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   release:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout code
         uses: actions/checkout@v4

From c9c5604971834f50f9bc899e7b4da23ecdb06602 Mon Sep 17 00:00:00 2001
From: Derek Miller <1340081+derek-miller@users.noreply.github.com>
Date: Thu, 15 Oct 2026 13:32:24 -0500
Subject: [PATCH 2/2] ci: build lua-openssl rocks with GCC 14+ on ubuntu-26.04

---
 .github/workflows/build.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9561a91..e0566e0 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -131,8 +131,9 @@ jobs:
         with:
           luarocksVersion: "3.12.2"
 
+      # GCC 14+ makes incompatible-pointer-types an error, which 0.8.5's ocsp.c trips.
       - name: Install lua-openssl ${{ matrix.rock }}
-        run: luarocks install openssl ${{ matrix.rock }}
+        run: luarocks install openssl ${{ matrix.rock }} CFLAGS="-O2 -fPIC -Wno-error=incompatible-pointer-types"
 
       - name: Assert the feature gate resolves as measured
         env: