diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 69c2a2dd33467..c8350f21cae27 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -439,9 +439,22 @@ jobs:
           version: "0.11.14"
           enable-cache: "true"
       - name: "Run tests"
+        shell: bash
         run: |
-          cargo nextest run --all-features --profile ci
-          cargo test --all-features --doc
+          # `ruff_cpp_spo` (fork-only, not present upstream) gates its libclang
+          # walker behind the `libclang` feature, which `--all-features` turns
+          # on here. The `clang` crate dlopens libclang at runtime, and on
+          # windows-latest that currently crashes with 0xc0000005 (Invalid
+          # access to memory location) rather than failing the test cleanly.
+          # Exclude the crate's tests on Windows only — macos-latest runs them
+          # fine — instead of dropping `--all-features` workspace-wide.
+          if [[ "${{ matrix.platform }}" == *windows* ]]; then
+            cargo nextest run --all-features --profile ci -E 'not package(ruff_cpp_spo)'
+            cargo test --all-features --doc --workspace --exclude ruff_cpp_spo
+          else
+            cargo nextest run --all-features --profile ci
+            cargo test --all-features --doc
+          fi
 
   cargo-test-wasm:
     name: "cargo test (wasm)"
diff --git a/python/ruff-ecosystem/ruff_ecosystem/defaults.py b/python/ruff-ecosystem/ruff_ecosystem/defaults.py
index a33798dd489aa..a5dc724b19f6a 100644
--- a/python/ruff-ecosystem/ruff_ecosystem/defaults.py
+++ b/python/ruff-ecosystem/ruff_ecosystem/defaults.py
@@ -38,7 +38,7 @@
     Project(repo=Repository(owner="binary-husky", name="gpt_academic", ref="master")),
     Project(repo=Repository(owner="bloomberg", name="pytest-memray", ref="main")),
     Project(
-        repo=Repository(owner="bokeh", name="bokeh", ref="branch-3.3"),
+        repo=Repository(owner="bokeh", name="bokeh", ref="branch-3.10"),
         check_options=CheckOptions(select="ALL"),
     ),
     # Disabled due to use of explicit `select` with `E999`, which has been removed.
@@ -56,7 +56,7 @@
     Project(repo=Repository(owner="fronzbot", name="blinkpy", ref="dev")),
     Project(repo=Repository(owner="ibis-project", name="ibis", ref="main")),
     Project(repo=Repository(owner="ing-bank", name="probatus", ref="main")),
-    Project(repo=Repository(owner="jrnl-org", name="jrnl", ref="develop")),
+    Project(repo=Repository(owner="jrnl-org", name="jrnl", ref="main")),
     Project(repo=Repository(owner="langchain-ai", name="langchain", ref="master")),
     Project(repo=Repository(owner="latchbio", name="latch", ref="main")),
     Project(repo=Repository(owner="lnbits", name="lnbits", ref="main")),
diff --git a/scripts/check_ecosystem.py b/scripts/check_ecosystem.py
index 944e2e2b77209..f9bdbf1b4c906 100755
--- a/scripts/check_ecosystem.py
+++ b/scripts/check_ecosystem.py
@@ -126,7 +126,7 @@ async def _get_commit(self: Self, checkout_dir: Path) -> str:
     Repository("aws", "aws-sam-cli", "develop"),
     Repository("binary-husky", "gpt_academic", "master"),
     Repository("bloomberg", "pytest-memray", "main"),
-    Repository("bokeh", "bokeh", "branch-3.3", select="ALL"),
+    Repository("bokeh", "bokeh", "branch-3.10", select="ALL"),
     # Disabled due to use of explicit `select` with `E999`, which has been removed.
     # See: https://github.com/astral-sh/ruff/pull/12129
     # Repository("demisto", "content", "master"),
@@ -136,7 +136,7 @@ async def _get_commit(self: Self, checkout_dir: Path) -> str:
     Repository("fronzbot", "blinkpy", "dev"),
     Repository("ibis-project", "ibis", "master"),
     Repository("ing-bank", "probatus", "main"),
-    Repository("jrnl-org", "jrnl", "develop"),
+    Repository("jrnl-org", "jrnl", "main"),
     Repository("langchain-ai", "langchain", "main"),
     Repository("latchbio", "latch", "main"),
     Repository("lnbits", "lnbits", "main"),