diff --git a/.github/workflows/android_ci.yml b/.github/workflows/android_ci.yml
index 458d491b7..0ccfe4cde 100644
--- a/.github/workflows/android_ci.yml
+++ b/.github/workflows/android_ci.yml
@@ -1,50 +1,50 @@
 name: Android Build CI
 
 on:
   push:
     branches: [master]
     paths-ignore:
       - 'landing/**'
       - 'web/**'
       - 'docs/**'
       - 'keyserver/**'
 
 jobs:
   build:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@v2
 
       - name: set up JDK 11
         uses: actions/setup-java@v2
         with:
           java-version: '11'
           distribution: 'adopt'
 
       - name: Install Yarn
         run: npm install -g yarn
 
       - name: yarn --frozen-lockfile
         run: yarn --frozen-lockfile
 
       - name: Save ANDROID_KEY_STORE_B64 to file
         env:
           ANDROID_KEY_STORE_B64: ${{secrets.ANDROID_KEY_STORE_B64}}
         run: echo "$ANDROID_KEY_STORE_B64" > ANDROID_KEY_STORE_B64.b64
 
       - name: Save ANDROID_KEY_STORE to file
         run: base64 -d ANDROID_KEY_STORE_B64.b64 > android_key_store.keystore
 
       - name: Configure gradle.properties
         run: |
           mkdir ~/.gradle
           touch ~/.gradle/gradle.properties
           echo "COMM_UPLOAD_STORE_FILE=$(pwd)/android_key_store.keystore" >> ~/.gradle/gradle.properties
           echo "COMM_UPLOAD_KEY_ALIAS=AndroidSigningKey" >> ~/.gradle/gradle.properties
 
       - name: Build with Gradle
         working-directory: ./native/android
         env:
           ANDROID_SIGNING_PASSWORD: ${{secrets.ANDROID_SIGNING_PASSWORD}}
         run: ./gradlew bundleRelease
diff --git a/.github/workflows/android_release.yml b/.github/workflows/android_release.yml
index 20367acf8..1b83aa18d 100644
--- a/.github/workflows/android_release.yml
+++ b/.github/workflows/android_release.yml
@@ -1,54 +1,54 @@
 name: Android Build/Upload to Play Store Console
 
 on:
   release:
     types: [published]
 
 jobs:
   build:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@v2
       - name: set up JDK 11
         uses: actions/setup-java@v2
         with:
           java-version: '11'
           distribution: 'adopt'
 
       - name: Install Yarn
         run: npm install -g yarn
 
       - name: yarn --frozen-lockfile
         run: yarn --frozen-lockfile
 
       - name: Save ANDROID_KEY_STORE_B64 to file
         env:
           ANDROID_KEY_STORE_B64: ${{secrets.ANDROID_KEY_STORE_B64}}
         run: echo "$ANDROID_KEY_STORE_B64" > ANDROID_KEY_STORE_B64.b64
 
       - name: Save ANDROID_KEY_STORE to file
         run: base64 -d ANDROID_KEY_STORE_B64.b64 > android_key_store.keystore
 
       - name: Configure gradle.properties
         run: |
           mkdir ~/.gradle
           touch ~/.gradle/gradle.properties
           echo "COMM_UPLOAD_STORE_FILE=$(pwd)/android_key_store.keystore" >> ~/.gradle/gradle.properties
           echo "COMM_UPLOAD_KEY_ALIAS=AndroidSigningKey" >> ~/.gradle/gradle.properties
 
       - name: Build with Gradle
         working-directory: ./native/android
         env:
           ANDROID_SIGNING_PASSWORD: ${{secrets.ANDROID_SIGNING_PASSWORD}}
         run: ./gradlew bundleRelease
 
       - name: Save PLAY_STORE_PUBLISHING_KEY to file
         working-directory: ./native/android
         env:
           PLAY_STORE_PUBLISHING_KEY: ${{secrets.PLAY_STORE_PUBLISHING_KEY}}
         run: echo "$PLAY_STORE_PUBLISHING_KEY" > PLAY_STORE_PUBLISHING_KEY.json
 
       - name: Upload to Google Play
         working-directory: ./native/android
         run: node upload-aab.js
diff --git a/.github/workflows/docker_keyserver.yml b/.github/workflows/docker_keyserver.yml
index 70110a2a9..f08a9990d 100644
--- a/.github/workflows/docker_keyserver.yml
+++ b/.github/workflows/docker_keyserver.yml
@@ -1,20 +1,20 @@
 name: Docker keyserver CI
 
 on:
   push:
     branches: [master]
     paths-ignore:
       - 'native/**'
       - 'docs/**'
       - 'services/**'
 
 jobs:
   build:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@v2
 
       - name: Build Docker
         working-directory: ./keyserver
         run: touch .env && bash/dc.sh build --no-cache
diff --git a/.github/workflows/eslint_flow_jest.yml b/.github/workflows/eslint_flow_jest.yml
index e37fcd158..6b95eece2 100644
--- a/.github/workflows/eslint_flow_jest.yml
+++ b/.github/workflows/eslint_flow_jest.yml
@@ -1,48 +1,48 @@
 name: ESLint & Flow & Jest
 
 on:
   push:
     branches: [master]
 
 jobs:
   build:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
 
       - name: npm install -g yarn
         run: npm install -g yarn
 
       - name: yarn --frozen-lockfile
         run: yarn --frozen-lockfile
 
       - name: yarn eslint --max-warnings=0
         run: yarn eslint --max-warnings=0
 
       - name: '[lib] flow'
         working-directory: ./lib
         run: ./node_modules/.bin/flow
 
       - name: '[keyserver] flow'
         working-directory: ./keyserver
         run: ./node_modules/.bin/flow
 
       - name: '[web] flow'
         working-directory: ./web
         run: ./node_modules/.bin/flow
 
       - name: '[landing] flow'
         working-directory: ./landing
         run: ./node_modules/.bin/flow
 
       - name: '[native] flow'
         working-directory: ./native
         run: ./node_modules/.bin/flow
 
       - name: '[lib] test'
         working-directory: ./lib
         run: yarn test
 
       - name: '[keyserver] test'
         working-directory: ./keyserver
         run: yarn test
diff --git a/.github/workflows/services_ci.yml b/.github/workflows/services_ci.yml
index c46c96ff3..ebe7ecd99 100644
--- a/.github/workflows/services_ci.yml
+++ b/.github/workflows/services_ci.yml
@@ -1,27 +1,27 @@
 name: Services CI
 
 on:
   push:
     branches: [master]
     paths-ignore:
       - 'landing/**'
       - 'web/**'
       - 'docs/**'
       - 'keyserver/**'
 
 jobs:
   build:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@v2
 
       - name: Install Yarn
         run: npm install -g yarn
 
       - name: yarn --frozen-lockfile
         run: yarn --frozen-lockfile
 
       - name: Build Services
         working-directory: ./services
         run: yarn build-all