Bump non-ICU4X dependencies to their latest versions

.github/workflows/nightly_build.yml

@@ -19,9 +19,9 @@ jobs:
             os: ubuntu-latest
             binary_extension: ""
           - target: aarch64-apple-darwin
-            os: macos-14
+            os: macos-latest
           - target: aarch64-unknown-linux-gnu
-            os: ubuntu-24.04-arm
+            os: ubuntu-26.04-arm
             binary_extension: ""
           - target: x86_64-pc-windows-msvc
             os: windows-latest

.github/workflows/release.yml

@@ -106,7 +106,7 @@ jobs:
           target: x86_64-unknown-linux-gnu
           binary_extension: ""
         - build: macos-arm64
-          os: macos-14
+          os: macos-latest
           target: aarch64-apple-darwin
           binary_extension: ""
         - build: win-msvc

.github/workflows/rust.yml

@@ -210,9 +210,9 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - os: macos-14
+          - os: macos-latest
           - os: windows-latest
-          - os: ubuntu-24.04-arm
+          - os: ubuntu-26.04-arm
           - os: ubuntu-latest
     steps:
       - name: Set environment

.github/workflows/security_audit.yml

@@ -5,6 +5,7 @@ on:
 
 permissions:
   contents: read
+  issues: write
 jobs:
   audit:
     runs-on: ubuntu-latest