v3.0: ci: use specific runner os versions in github actions (backport of #9613)

[mergify]

Problem

the latest tag might break us unexpectedly

Summary of Changes

use specific versions

---

This is an automatic backport of pull request #9613 done by Mergify.

[mergify]

Cherry-pick of b505c80 has failed:

On branch mergify/bp/v3.0/pr-9613
Your branch is up to date with 'origin/v3.0'.

You are currently cherry-picking commit b505c80fb.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	modified:   .github/workflows/cargo.yml
	modified:   .github/workflows/changelog-label.yml
	modified:   .github/workflows/dependabot-pr.yml
	modified:   .github/workflows/downstream-project-anchor.yml
	modified:   .github/workflows/downstream-project-spl.yml
	modified:   .github/workflows/release.yml

Unmerged paths:
  (use "git add/rm <file>..." as appropriate to mark resolution)
	deleted by us:   .github/workflows/label-actions.yml

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally