diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 93fb8681c..e2b09e4ee 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -148,7 +148,7 @@ jobs:
     name: Create and sign multi-arch manifest
     needs: [build_push]
     if: github.event_name != 'pull_request' && github.event_name != 'merge_group'
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       packages: write
       id-token: write      # keyless cosign signing via OIDC