diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
index a44f161c7e..63ff4d423f 100644
--- a/.github/workflows/build_and_test.yml
+++ b/.github/workflows/build_and_test.yml
@@ -10,34 +10,34 @@ on:
 jobs:
   test:
     name: ${{ matrix.name }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     strategy:
       fail-fast: false
       matrix:
         include:
-          - name: "nginx 1.31.7 + OpenSSL"
-            NGINX_VERSION: "1.31.7"
+          - name: "nginx 1.31.8 + OpenSSL"
+            NGINX_VERSION: "1.31.8"
             TEST_NGINX_TIMEOUT: "5"
 
-          - name: "nginx 1.31.7 + OpenSSL + HTTP/2"
-            NGINX_VERSION: "1.31.7"
+          - name: "nginx 1.31.8 + OpenSSL + HTTP/2"
+            NGINX_VERSION: "1.31.8"
             TEST_NGINX_TIMEOUT: "5"
             TEST_NGINX_USE_HTTP2: "1"
 
-          - name: "nginx 1.31.7 + OpenSSL + HTTP/3"
-            NGINX_VERSION: "1.31.7"
+          - name: "nginx 1.31.8 + OpenSSL + HTTP/3"
+            NGINX_VERSION: "1.31.8"
             TEST_NGINX_USE_HTTP3: "1"
             TEST_NGINX_QUIC_IDLE_TIMEOUT: "3"
 
-          - name: "nginx 1.31.7 + BoringSSL + HTTP/3"
-            NGINX_VERSION: "1.31.7"
+          - name: "nginx 1.31.8 + BoringSSL + HTTP/3"
+            NGINX_VERSION: "1.31.8"
             BORINGSSL: "1"
             TEST_NGINX_USE_HTTP3: "1"
             TEST_NGINX_QUIC_IDLE_TIMEOUT: "3"
 
-          - name: "nginx 1.31.6 + OpenSSL + ASan"
-            NGINX_VERSION: "1.31.6"
+          - name: "nginx 1.31.8 + OpenSSL + ASan"
+            NGINX_VERSION: "1.31.8"
             # ASan slows every request down, so allow more time than the
             # other jobs before a test is called timed out.
             TEST_NGINX_TIMEOUT: "10"