diff --git a/.github/workflows/gc-cron.yaml b/.github/workflows/gc-cron.yaml
index 3f79d84..97eb4fd 100644
--- a/.github/workflows/gc-cron.yaml
+++ b/.github/workflows/gc-cron.yaml
@@ -13,7 +13,7 @@ permissions:
 
 jobs:
   stack-to-delete:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     outputs:
       stacks: ${{ steps.list_stacks.outputs.stacks_list }}
     steps:
@@ -42,7 +42,7 @@ jobs:
       fail-fast: false
       matrix:
         stack: ${{ fromJson(needs.stack-to-delete.outputs.stacks) }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     env:
       # NOTE: A stack carries the provider it was spawned on, and the bucket
       # holds both, so collecting has to be able to reach either one. Without
diff --git a/.github/workflows/platform-test.yaml b/.github/workflows/platform-test.yaml
index af7de6a..8c564ad 100644
--- a/.github/workflows/platform-test.yaml
+++ b/.github/workflows/platform-test.yaml
@@ -44,7 +44,7 @@ env:
 jobs:
   test:
     name: "${{ inputs.name }} test"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     env:
       OS_PASSWORD: ${{ secrets.OS_PASSWORD }}
     steps:
@@ -77,7 +77,7 @@ jobs:
     name: "${{ inputs.name }} destroy"
     needs: test
     if: always()
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     env:
       OS_PASSWORD: ${{ secrets.OS_PASSWORD }}
     steps:
diff --git a/.github/workflows/pre-merge.yaml b/.github/workflows/pre-merge.yaml
index 1b36248..fa7d74b 100644
--- a/.github/workflows/pre-merge.yaml
+++ b/.github/workflows/pre-merge.yaml
@@ -18,7 +18,7 @@ env:
 
 jobs:
   lint:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/promote.yaml b/.github/workflows/promote.yaml
index b91c276..f6671a9 100644
--- a/.github/workflows/promote.yaml
+++ b/.github/workflows/promote.yaml
@@ -9,7 +9,7 @@ on:
 
 jobs:
   create-release:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e083868..5604efd 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -25,7 +25,7 @@ on:
 
 jobs:
   prepare-version:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     if: github.ref_name == 'main'
     steps:
       - uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
diff --git a/.github/workflows/snapshot-test.yaml b/.github/workflows/snapshot-test.yaml
index 9040da6..e829ae5 100644
--- a/.github/workflows/snapshot-test.yaml
+++ b/.github/workflows/snapshot-test.yaml
@@ -38,7 +38,7 @@ jobs:
   # others.
   test:
     name: "snapshot test"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     env:
       OS_PASSWORD: ${{ secrets.OS_PASSWORD }}
     steps:
@@ -122,7 +122,7 @@ jobs:
     name: "snapshot destroy the ${{ matrix.platform }} platform"
     needs: test
     if: always()
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     strategy:
       matrix:
         # The snapshotted one is taken away mid test, this is what catches it
diff --git a/.github/workflows/update-test.yaml b/.github/workflows/update-test.yaml
index c62af76..4126618 100644
--- a/.github/workflows/update-test.yaml
+++ b/.github/workflows/update-test.yaml
@@ -43,7 +43,7 @@ jobs:
   # it is not a platform test like the others.
   test:
     name: "${{ inputs.name }} test"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     env:
       OS_PASSWORD: ${{ secrets.OS_PASSWORD }}
     steps:
@@ -215,7 +215,7 @@ jobs:
     name: "${{ inputs.name }} destroy"
     needs: test
     if: always()
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     env:
       OS_PASSWORD: ${{ secrets.OS_PASSWORD }}
     steps: