diff --git a/.github/workflows/go-release.yml b/.github/workflows/go-release.yml
index 8c8c2b9cb..950ad6ede 100644
--- a/.github/workflows/go-release.yml
+++ b/.github/workflows/go-release.yml
@@ -18,7 +18,7 @@ jobs:
 
   go-release:
     needs: get-dafny-version
-    runs-on: macos-13
+    runs-on: macos-latest
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/library_go_tests.yml b/.github/workflows/library_go_tests.yml
index d416495b5..893c2a14a 100644
--- a/.github/workflows/library_go_tests.yml
+++ b/.github/workflows/library_go_tests.yml
@@ -36,7 +36,7 @@ jobs:
             # Windows source code is tested downstream (ex. ESDK-Python CI).
             # windows-latest,
             ubuntu-22.04,
-            macos-13,
+            macos-latest,
           ]
     runs-on: ${{ matrix.os }}
     defaults:
diff --git a/.github/workflows/library_interop_tests.yml b/.github/workflows/library_interop_tests.yml
index 1dc9b02b5..3e4610f7e 100644
--- a/.github/workflows/library_interop_tests.yml
+++ b/.github/workflows/library_interop_tests.yml
@@ -28,7 +28,7 @@ jobs:
             # https://taskei.amazon.dev/tasks/CrypTool-5283
             # windows-latest,
             ubuntu-22.04,
-            macos-13,
+            macos-latest,
           ]
         language: [java, net, rust, python, go]
         # https://taskei.amazon.dev/tasks/CrypTool-5284
@@ -227,7 +227,7 @@ jobs:
             # TODO just test on mac and ubuntu for now
             # windows-latest,
             ubuntu-22.04,
-            macos-13,
+            macos-latest,
           ]
         decrypting_language: [java, net, rust, python, go]
         dotnet-version: ["6.0.x"]
diff --git a/.github/workflows/library_java_tests.yml b/.github/workflows/library_java_tests.yml
index ccf1331de..e6a00c9ca 100644
--- a/.github/workflows/library_java_tests.yml
+++ b/.github/workflows/library_java_tests.yml
@@ -31,7 +31,7 @@ jobs:
             # TODO just test on mac for now
             # windows-latest,
             ubuntu-22.04,
-            macos-13,
+            macos-latest,
           ]
         java-versions: [8, 11, 16, 17]
     runs-on: ${{ matrix.os }}
diff --git a/.github/workflows/library_net_tests.yml b/.github/workflows/library_net_tests.yml
index 3d4332970..f7788dce5 100644
--- a/.github/workflows/library_net_tests.yml
+++ b/.github/workflows/library_net_tests.yml
@@ -29,7 +29,7 @@ jobs:
             TestVectorsAwsCryptographicMaterialProviders,
           ]
         dotnet-version: ["6.0.x"]
-        os: [windows-latest, ubuntu-22.04, macos-13]
+        os: [windows-latest, ubuntu-22.04, macos-latest]
     runs-on: ${{ matrix.os }}
     defaults:
       run:
diff --git a/.github/workflows/library_python_tests.yml b/.github/workflows/library_python_tests.yml
index f21864402..89feeca6c 100644
--- a/.github/workflows/library_python_tests.yml
+++ b/.github/workflows/library_python_tests.yml
@@ -36,7 +36,7 @@ jobs:
             # Windows source code is tested downstream (ex. ESDK-Python CI).
             # windows-latest,
             ubuntu-22.04,
-            macos-13,
+            macos-latest,
           ]
     runs-on: ${{ matrix.os }}
     defaults:
diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml
index 27aa509cb..43cd8ecfc 100644
--- a/.github/workflows/library_rust_tests.yml
+++ b/.github/workflows/library_rust_tests.yml
@@ -29,7 +29,7 @@ jobs:
             TestVectorsAwsCryptographicMaterialProviders,
           ]
         # removed windows-latest because somehow it can't build aws-lc in CI
-        os: [ubuntu-22.04, macos-13]
+        os: [ubuntu-22.04, macos-latest]
     runs-on: ${{ matrix.os }}
     permissions:
       id-token: write
diff --git a/.github/workflows/sem_ver.yml b/.github/workflows/sem_ver.yml
index 5a83c2ac1..4f0443693 100644
--- a/.github/workflows/sem_ver.yml
+++ b/.github/workflows/sem_ver.yml
@@ -6,7 +6,7 @@ on:
 
 jobs:
   semantic-release:
-    runs-on: macos-13
+    runs-on: macos-latest
     permissions:
       id-token: write
       contents: read
diff --git a/.github/workflows/semantic_release.yml b/.github/workflows/semantic_release.yml
index 9a540b614..478be33b5 100644
--- a/.github/workflows/semantic_release.yml
+++ b/.github/workflows/semantic_release.yml
@@ -14,8 +14,8 @@ jobs:
     # there is no easy way in gha to check if the actor is part of the team, running semantic release is a more
     # privileged operation, so we must make sure this list of users is a subset of the users labeled as maintainers of
     # https://github.com/orgs/aws/teams/aws-crypto-tools
-    if: contains('["seebees","texastony","ShubhamChaturvedi7","lucasmcdonald3","josecorella","imabhichow","rishav-karanjit","antonf-amzn","kessplas","RitvikKapila","ajewellamz"]', github.actor)
-    runs-on: macos-13
+    if: contains('["seebees","texastony","ShubhamChaturvedi7","lucasmcdonald3","josecorella","imabhichow","rishav-karanjit","antonf-amzn","kessplas","ajewellamz"]', github.actor)
+    runs-on: macos-latest
     permissions:
       id-token: write
       contents: write