[3.11] gh-122544: Change OS image in GitHub Actions to Ubuntu 22.04 (#122566)

[hugovk]

(cherry picked from commit fc233f4)

The ubuntu-20.04 image is deprecated and will be fully unsupported by 2025-04-01: actions/runner-images#11101.

Plus some other things like quotes and zizmor fixes from main.

• Issue: Change base OS image to Ubuntu-24.04 in CI testing #122544

[hugovk]

Let's go through these one-by-one. ABI check first, python3.11 has changed when using ubuntu-22.04 instead of ubuntu-20.04. I'll add the changed file here, and include the RM when the PR is ready for merge.

https://devguide.python.org/getting-started/setup-building/index.html#regenerate-the-abi-dump

[hugovk]

With ubuntu-24.04, "Ubuntu / build and test (ubuntu-24.04)" and "Address sanitizer" fail with:

The necessary bits to build these optional modules were not found:
nis To find the necessary bits, look in setup.py in detect_modules() for the module's name.

But they pass with ubuntu-22.04 so it's enough to get them off ubuntu-20.04.

[hugovk]

@pablogsal We need to upgrade the CI away from ubuntu-20.04 because it's going away soon: actions/runner-images#11101. The change of OS version means we get a new ABI file, so pinging you on this.

[ezio-melotti]

Do you know if these are the same errors that we just saw about the missing bits?

[hugovk]

I don't know, the comment was added in #126619 and the logs have since expired: https://github.com/python/cpython/actions/runs/11853955712/job/33035153091?pr=126619.

[pablogsal]

@pablogsal We need to upgrade the CI away from ubuntu-20.04 because it's going away soon: actions/runner-images#11101. The change of OS version means we get a new ABI file, so pinging you on this.

Makes sense thanks a lot for the fix!