CI: run apt-get update before any apt install

Try to avoid surprises down the track by doing this across the board.

.github/workflows/lint.yml

@@ -40,6 +40,8 @@ jobs:
       with:
         toolchain_channel: ${{ matrix.rust_version }}
         components: clippy
+    - name: Update package database
+      run: sudo apt-get update
     - name: Install deps
       run: |
         sudo apt install gettext
@@ -51,6 +53,8 @@ jobs:
     steps:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2, build_tools/update-dependencies.sh
     - uses: ./.github/actions/rust-toolchain@stable
+    - name: Update package database
+      run: sudo apt-get update
     - name: Install deps
       run: |
         sudo apt install gettext

.github/workflows/release.yml

@@ -40,6 +40,8 @@ jobs:
         with:
           # Workaround for https://github.com/actions/checkout/issues/882
           ref: ${{ inputs.version }}
+      - name: Update package database
+        run: sudo apt-get update
       - name: Install dependencies
         run: sudo apt install cmake gettext ninja-build python3-pip
       - uses: ./.github/actions/install-sphinx
@@ -82,6 +84,8 @@ jobs:
         uses: ./.github/actions/rust-toolchain@stable
         with:
           targets: x86_64-unknown-linux-musl,aarch64-unknown-linux-musl
+      - name: Update package database
+        run: sudo apt-get update
       - name: Install dependencies
         run: sudo apt install crossbuild-essential-arm64 gettext musl-tools
       - uses: ./.github/actions/install-sphinx

.github/workflows/test.yml

@@ -48,20 +48,15 @@ jobs:
     - uses: ./.github/actions/rust-toolchain@oldest-supported
       with:
         targets: "i586-unknown-linux-gnu"
+    - name: Update package database
+      run: sudo apt-get update
     - name: Install deps
       uses: ./.github/actions/install-dependencies
       with:
         include_pcre: false
         include_sphinx: false
     - name: Install g++-multilib
-      run: |
-        # GitHub does not consistently provide images with up-to-date package lists, causing
-        # `apt install` failures.
-        # Work around this by updating the package list.
-        # https://github.com/actions/runner-images/issues/13636
-        # https://github.com/actions/runner-images/issues/12599
-        sudo apt-get update
-        sudo apt install g++-multilib
+      run: sudo apt install g++-multilib
     - name: cmake
       env:
           CFLAGS: "-m32"
@@ -93,6 +88,8 @@ jobs:
         # ASAN uses `cargo build -Zbuild-std` which requires the rust-src component
         # this is comma-separated
         components: rust-src
+    - name: Update package database
+      run: sudo apt-get update
     - name: Install deps
       uses: ./.github/actions/install-dependencies
       with: