diff --git a/.github/workflows/auto-pr.yml b/.github/workflows/auto-pr.yml
index 204589a100..140823ab46 100644
--- a/.github/workflows/auto-pr.yml
+++ b/.github/workflows/auto-pr.yml
@@ -9,7 +9,7 @@ on:
 
 jobs:
   debug:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: event info
         run: |
@@ -19,7 +19,7 @@ jobs:
 
   review:
     if: github.event.action == 'opened' && !endsWith(github.event.pull_request.user.login, '[bot]')
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       pull-requests: write
     steps:
@@ -41,7 +41,7 @@ jobs:
           && startsWith(github.event.label.name, 'backport:')
         )
       )
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/build-push.yml b/.github/workflows/build-push.yml
index dfa24a6b8b..32783cfb55 100644
--- a/.github/workflows/build-push.yml
+++ b/.github/workflows/build-push.yml
@@ -32,7 +32,7 @@ jobs:
 
   release:
     needs: [build]
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 15
 
     concurrency:
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 57d8a517d5..31b97e13e2 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -17,7 +17,7 @@ permissions:
 
 jobs:
   setup:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 15
 
     outputs:
@@ -34,7 +34,7 @@ jobs:
         run: echo "uid=$(uuidgen)" >> ${GITHUB_OUTPUT}
 
   lint:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: setup
     timeout-minutes: 15
     permissions:
@@ -70,7 +70,7 @@ jobs:
           check_all_files_with_shebangs: 'true'
 
   bats:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: setup
     timeout-minutes: 15
 
@@ -90,7 +90,7 @@ jobs:
         run: pnpm test:bats
 
   vitest:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: setup
     timeout-minutes: 15
     permissions:
@@ -117,7 +117,7 @@ jobs:
           use_oidc: true
 
   build:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: setup
     timeout-minutes: 15
 
@@ -147,10 +147,10 @@ jobs:
       matrix:
         arch:
           - name: x86_64
-            os: ubuntu-24.04
+            os: ubuntu-26.04
             tag: amd64
           - name: aarch64
-            os: ubuntu-24.04-arm
+            os: ubuntu-26.04-arm
             tag: arm64
 
     steps:
@@ -178,7 +178,7 @@ jobs:
             build-ttl
 
   distro:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs:
       - bats
       - lint
@@ -217,7 +217,7 @@ jobs:
 
   # test old distros on arm64
   base-arm64:
-    runs-on: ubuntu-24.04-arm
+    runs-on: ubuntu-26.04-arm
     needs:
       - bats
       - lint
@@ -290,17 +290,17 @@ jobs:
           - latest
         arch:
           - name: x86_64
-            os: ubuntu-24.04
+            os: ubuntu-26.04
             tag: amd64
           - name: aarch64
-            os: ubuntu-24.04-arm
+            os: ubuntu-26.04-arm
             tag: arm64
         # include:
         #   # no ubuntu arm64 support for haskell
         #   - lang: haskell
         #     arch:
         #       name: x86_64
-        #       os: ubuntu-24.04
+        #       os: ubuntu-26.04
         #       tag: amd64
 
     env:
@@ -341,7 +341,7 @@ jobs:
       - base-arm64
       - distro
       - lang
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 1
     if: always()
     steps:
diff --git a/.github/workflows/devcontainer.yml b/.github/workflows/devcontainer.yml
index b23e87f4d0..87c5536f7b 100644
--- a/.github/workflows/devcontainer.yml
+++ b/.github/workflows/devcontainer.yml
@@ -14,7 +14,7 @@ permissions:
 
 jobs:
   devcontainer-test:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     if: github.event.pull_request.draft != true
     steps:
       - name: Checkout
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index 1bb1ddb46e..63a6b14447 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -9,7 +9,7 @@ permissions: {}
 
 jobs:
   trivy:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
       security-events: write