diff --git a/.github/workflows/build-push.yml b/.github/workflows/build-push.yml
index 4059ffccf4..c8ff79f1b9 100644
--- a/.github/workflows/build-push.yml
+++ b/.github/workflows/build-push.yml
@@ -70,7 +70,7 @@ jobs:
     needs: [build]
     # release only from pushes to `main` and `maint/**`, the merge queue only builds
     if: github.event_name == 'push'
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 15
 
     concurrency:
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a6a3f1f94b..e033f08744 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -77,7 +77,7 @@ jobs:
           fi
 
   lint:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: setup
     timeout-minutes: 15
     permissions:
@@ -134,7 +134,7 @@ jobs:
           GH_TOKEN: ${{ github.token }}
 
   bats:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: setup
     # skipped for docs or dev container only pull requests, like the build
     if: needs.setup.outputs.skip-build != 'true'
@@ -156,7 +156,7 @@ jobs:
         run: pnpm test:bats
 
   vitest:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: setup
     timeout-minutes: 15
     permissions:
@@ -188,7 +188,7 @@ jobs:
           use_oidc: true
 
   build:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: setup
     # skipped for docs or dev container only pull requests, so `base`,
     # `distro`, `base-arm64` and `lang` are skipped too
@@ -224,10 +224,10 @@ jobs:
       matrix:
         arch:
           - name: x86_64
-            os: ubuntu-24.04
+            os: ubuntu-26.04
             tag: amd64
           - name: aarch64
-            os: ubuntu-24.04-arm
+            os: ubuntu-26.04-arm
             tag: arm64
 
     steps:
@@ -258,7 +258,7 @@ jobs:
         run: test/readonly/test.sh
 
   distro:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     # docker tests are skipped for draft pull requests
     if: github.event.pull_request.draft != true
     needs:
@@ -314,7 +314,7 @@ jobs:
 
   # test old distros on arm64
   base-arm64:
-    runs-on: ubuntu-24.04-arm
+    runs-on: ubuntu-26.04-arm
     if: github.event.pull_request.draft != true
     needs:
       - bats
@@ -395,17 +395,17 @@ jobs:
           - latest
         arch:
           - name: x86_64
-            os: ubuntu-24.04
+            os: ubuntu-26.04
             tag: amd64
           - name: aarch64
-            os: ubuntu-24.04-arm
+            os: ubuntu-26.04-arm
             tag: arm64
         # include:
         #   # no ubuntu arm64 support for haskell
         #   - lang: haskell
         #     arch:
         #       name: x86_64
-        #       os: ubuntu-24.04
+        #       os: ubuntu-26.04
         #       tag: amd64
 
     env:
diff --git a/.github/workflows/devcontainer.yml b/.github/workflows/devcontainer.yml
index 776501e097..1ad9944103 100644
--- a/.github/workflows/devcontainer.yml
+++ b/.github/workflows/devcontainer.yml
@@ -18,7 +18,7 @@ permissions:
 
 jobs:
   devcontainer-test:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     if: github.event.pull_request.draft != true
     timeout-minutes: 20
     steps: