chore(github-action): update action ubuntu to v26

.github/workflows/apm-materialize.yml

@@ -35,7 +35,7 @@ concurrency:
 jobs:
   materialize:
     name: Materialize APM primitives
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write

.github/workflows/apm-sync.yml

@@ -78,7 +78,7 @@ permissions:
 jobs:
   apm-sync:
     name: Sync APM primitives
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write

.github/workflows/assign-issue-to-codeowners.yml

@@ -26,7 +26,7 @@ permissions:
 jobs:
   assign:
     name: Assign issue to CODEOWNERS
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
       issues: write

.github/workflows/autofix.yml

@@ -40,7 +40,7 @@ permissions:
 jobs:
   autofix:
     name: auto-fix formatting
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout code
         # zizmor: ignore[artipacked]

.github/workflows/config-sync.yml

@@ -36,7 +36,7 @@ permissions:
 jobs:
   sync:
     name: Sync config from central repo
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       issues: write

.github/workflows/label-sync.yml

@@ -32,7 +32,7 @@ permissions:
 jobs:
   label-sync:
     name: Label Sync
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
       issues: write

.github/workflows/labeler.yml

@@ -21,7 +21,7 @@ permissions:
 jobs:
   pr-labeler:
     name: PR Labeler
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
     permissions:
       contents: read
@@ -40,7 +40,7 @@ jobs:
 
   issue-labeler:
     name: Issue Labeler
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     if: ${{ github.event_name == 'issues' }}
     permissions:
       contents: read

.github/workflows/lint.yml

@@ -117,7 +117,7 @@ jobs:
     name: dprint
     if: ${{ inputs.lint-dprint }}
     continue-on-error: ${{ ! inputs.lint-fail-on-error }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     steps:
       - name: Checkout code
@@ -159,7 +159,7 @@ jobs:
     name: yamlfmt
     if: ${{ inputs.lint-yamlfmt }}
     continue-on-error: ${{ ! inputs.lint-fail-on-error }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     steps:
       - name: Checkout code
@@ -200,7 +200,7 @@ jobs:
     name: yamllint
     if: ${{ inputs.lint-yamllint }}
     continue-on-error: ${{ ! inputs.lint-fail-on-error }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     steps:
       - name: Checkout code
@@ -241,7 +241,7 @@ jobs:
     name: actionlint
     if: ${{ inputs.lint-actionlint }}
     continue-on-error: ${{ ! inputs.lint-fail-on-error }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     steps:
       - name: Checkout code
@@ -262,7 +262,7 @@ jobs:
     name: gitleaks
     if: ${{ inputs.lint-gitleaks }}
     continue-on-error: ${{ ! inputs.lint-fail-on-error }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     steps:
       - name: Checkout code
@@ -302,7 +302,7 @@ jobs:
     name: go
     if: ${{ inputs.lint-go }}
     continue-on-error: ${{ ! inputs.lint-fail-on-error }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 15
     steps:
       - name: Checkout code
@@ -346,7 +346,7 @@ jobs:
     name: shellcheck
     if: ${{ inputs.lint-shellcheck }}
     continue-on-error: ${{ ! inputs.lint-fail-on-error }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     steps:
       - name: Checkout code
@@ -401,7 +401,7 @@ jobs:
     name: shfmt
     if: ${{ inputs.lint-shfmt }}
     continue-on-error: ${{ ! inputs.lint-fail-on-error }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     steps:
       - name: Checkout code
@@ -440,7 +440,7 @@ jobs:
     name: checkov
     if: ${{ inputs.lint-checkov }}
     continue-on-error: ${{ ! inputs.lint-fail-on-error }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 15
     permissions:
       contents: read
@@ -493,7 +493,7 @@ jobs:
     name: trivy
     if: ${{ inputs.lint-trivy }}
     continue-on-error: ${{ ! inputs.lint-fail-on-error }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 15
     permissions:
       contents: read
@@ -554,7 +554,7 @@ jobs:
     name: zizmor
     if: ${{ inputs.lint-zizmor }}
     continue-on-error: ${{ ! inputs.lint-fail-on-error }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     permissions:
       contents: read
@@ -593,7 +593,7 @@ jobs:
     name: config drift
     if: ${{ inputs.lint-config-drift }}
     continue-on-error: ${{ ! inputs.lint-fail-on-error }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     steps:
       - name: Checkout code

.github/workflows/pages.yml

@@ -189,7 +189,7 @@ permissions:
 jobs:
   validate-inputs:
     name: Validate inputs
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 5
     steps:
       - name: Validate tool versions
@@ -289,7 +289,7 @@ jobs:
     name: Detect Cloudflare configuration
     needs:
       - validate-inputs
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     outputs:
       enabled: ${{ steps.detect.outputs.enabled }}
       project-name: ${{ steps.detect.outputs.project-name }}
@@ -403,7 +403,7 @@ jobs:
     needs:
       - validate-inputs
     if: ${{ github.event_name != 'pull_request' || github.event.action != 'closed' }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 15
     steps:
       - name: Checkout code
@@ -443,7 +443,7 @@ jobs:
       - test
     if: >-
       inputs.github-pages && github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', inputs.production-branch)
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     concurrency:
       # Concurrency groups are already scoped to the repository, so naming the
@@ -554,7 +554,7 @@ jobs:
       # detect-cloudflare job decides which targets run for this event.
       matrix:
         include: ${{ fromJSON(needs.detect-cloudflare.outputs.targets) }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     concurrency:
       # Scoped per Cloudflare project: a repository may call this workflow once
@@ -651,7 +651,7 @@ jobs:
     if: >-
       needs.detect-cloudflare.outputs.deploy-production == 'true' && inputs.cloudflare-custom-domain != '' && needs.deploy-cloudflare.result
       == 'success'
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 5
     concurrency:
       group: >-
@@ -958,7 +958,7 @@ jobs:
       inputs.cloudflare-preview && github.event_name == 'pull_request' && github.event.action != 'closed' && github.event.pull_request.head.repo.full_name
       == github.repository && github.actor != 'renovate[bot]' && github.actor != 'dependabot[bot]' && needs.detect-cloudflare.outputs.enabled
       == 'true'
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     concurrency:
       # Scoped per Cloudflare project, as above. Without the project name two
@@ -1086,7 +1086,7 @@ jobs:
       inputs.cloudflare-preview && github.event_name == 'pull_request' && github.event.action == 'closed' && github.event.pull_request.head.repo.full_name
       == github.repository && github.actor != 'renovate[bot]' && github.actor != 'dependabot[bot]' && needs.detect-cloudflare.outputs.enabled
       == 'true'
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 5
     permissions:
       deployments: write

.github/workflows/release-please.yml

@@ -76,7 +76,7 @@ permissions:
 jobs:
   release-please:
     name: Open or update release PR
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       # release-please needs to push the chore-release branch and tag.
       contents: write

.github/workflows/release.yml

@@ -19,7 +19,7 @@ permissions:
 jobs:
   release:
     name: Create GitHub Release
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
     steps:

.github/workflows/renovate-pr-cooldown.yml

@@ -50,7 +50,7 @@ permissions:
 jobs:
   cooldown:
     name: pr-cooldown
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
       pull-requests: read

.github/workflows/test.yml

@@ -13,7 +13,7 @@ permissions:
 jobs:
   renovate-presets:
     name: Renovate preset checks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

.github/workflows/todo-to-issue.yml

@@ -22,7 +22,7 @@ permissions:
 jobs:
   run:
     name: TODO to Issue
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

.github/workflows/vendored-file-sync.yml

@@ -74,7 +74,7 @@ permissions:
 jobs:
   sync:
     name: Refresh vendored files
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write