diff --git a/.github/workflows/python-cibuildwheel.yml b/.github/workflows/python-cibuildwheel.yml
index e978498e6..81c220503 100644
--- a/.github/workflows/python-cibuildwheel.yml
+++ b/.github/workflows/python-cibuildwheel.yml
@@ -13,19 +13,19 @@ jobs:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        os: [ubuntu-22.04, macos-12]
+        os: [ubuntu-22.04, macos-14]
         # separate archs, so they use individual caches
         arch: [ 'x86_64', 'arm64' ]
         flavor: ['cpython', 'pypy']
         # separate musl and many on linux, for mac we just skip one of those
         target: [ 'many', 'musl' ]
         exclude:
-          - os: macos-12
+          - os: macos-14
             target: musl
           - os: ubuntu-22.04
             target: musl
             flavor: pypy
-          - os: macos-12
+          - os: macos-14
             arch: arm64
             flavor: pypy
     steps:
@@ -97,7 +97,7 @@ jobs:
           PACKAGES=( icu4c xz lz4 zstd zlib snappy boost )
           for PACKAGE in "${PACKAGES[@]}"
           do
-            response=$(arm64-homebrew/bin/brew fetch --force --bottle-tag=arm64_monterey $PACKAGE | grep Downloaded )
+            response=$(arm64-homebrew/bin/brew fetch --force --bottle-tag=arm64_sonoma $PACKAGE | grep Downloaded )
             download_path=$(echo $response | xargs -n 1 | tail -1)
             arm64-homebrew/bin/brew reinstall -vd $download_path
           done