Build release binaries on Ubuntu 22.04 for glibc 2.35 compat

Debian 12 (bookworm) ships glibc 2.36. The previous ubuntu-latest
(24.04) produced binaries requiring glibc 2.39.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.github/workflows/release.yaml

@@ -17,10 +17,10 @@ jobs:
       matrix:
         include:
           - target: x86_64-unknown-linux-gnu
-            os: ubuntu-latest
+            os: ubuntu-22.04
             arch: amd64
           - target: aarch64-unknown-linux-gnu
-            os: ubuntu-latest
+            os: ubuntu-22.04
             arch: arm64
     runs-on: ${{ matrix.os }}
     steps:

CHANGELOG.md

@@ -6,6 +6,8 @@
 
 ### Fixes
 
+- Build on Ubuntu 22.04 for glibc 2.35 compatibility (Debian 12+)
+
 ### Changes
 
 ## 0.1.0 (2026-04-12)

debian/changelog

@@ -1,6 +1,6 @@
 certforge (0.2.0-1) unstable; urgency=low
 
-  *
+  * Build on Ubuntu 22.04 for glibc 2.35 compatibility (Debian 12+)
 
  -- Roman Kivalin <roman@shl.dev>  Sat, 12 Apr 2026 22:00:00 +0000