Right now, we use ubuntu-latest, macos-latest etc in CI, in .github/workflows/ci.yaml. This is problematic, because it means that the prebuilt binaries are likely to stop working on older platforms between releases, without anything in the changelog. See for example https://discourse.purescript.org/t/dockerfile-for-purescript-0-14-2/2379, in which the prebuilt binaries no longer worked because we are linking against a newer version of glibc.

I think we should probably pin these to specific versions, and generally be a bit more conservative about updating, since binaries built on a newer OS are sometimes unlikely to work on an older one.