diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1afc594..fd3bc65 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -32,7 +32,7 @@ permissions: {}
 
 jobs:
   plan:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 5
     permissions:
       contents: read
@@ -243,7 +243,7 @@ jobs:
     name: publish (${{ matrix.image.family }})
     needs: [plan, packages, test]
     if: ${{ !cancelled() && inputs.publish && needs.plan.result == 'success' }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 30
     permissions:
       contents: read
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 043c5e0..081650e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -46,7 +46,7 @@ jobs:
   release:
     needs: build
     if: ${{ !cancelled() }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 15
     permissions:
       contents: write
@@ -159,7 +159,7 @@ jobs:
   cleanup:
     needs: [build, release]
     if: ${{ !cancelled() && needs.build.result == 'success' }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 30
     continue-on-error: true
     permissions:
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 13f16f9..9d5dde0 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -29,7 +29,7 @@ permissions:
 
 jobs:
   renovate:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 30
     steps:
       - name: Checkout
diff --git a/.github/workflows/wolfi-watch.yml b/.github/workflows/wolfi-watch.yml
index 7e37524..d470674 100644
--- a/.github/workflows/wolfi-watch.yml
+++ b/.github/workflows/wolfi-watch.yml
@@ -17,7 +17,7 @@ permissions: {}
 
 jobs:
   watch:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 20
     permissions:
       contents: read