diff --git a/.github/actions/install-tmt/action.yml b/.github/actions/install-tmt/action.yml
index 8a0bc9d792..853870c0e1 100644
--- a/.github/actions/install-tmt/action.yml
+++ b/.github/actions/install-tmt/action.yml
@@ -4,9 +4,9 @@ runs:
   using: 'composite'
   steps:
     - name: Set up Python
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@v7
       with:
-        python-version: '3.12.14'
+        python-version: '3.14.8'
     - name: Install tmt
       shell: bash
       run: |
diff --git a/.github/workflows/build-and-publish.yml b/.github/workflows/build-and-publish.yml
index ac75eff266..14f1a5b2d8 100644
--- a/.github/workflows/build-and-publish.yml
+++ b/.github/workflows/build-and-publish.yml
@@ -24,7 +24,7 @@ jobs:
           # centos-9 UKI is experimental/broken (https://github.com/bootc-dev/bootc/issues/1812)
           - test_os: centos-9
             variant: composefs-sealeduki-sdboot
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@v7
       - name: Bootc Ubuntu Setup
diff --git a/.github/workflows/crates-release.yml b/.github/workflows/crates-release.yml
index 63a5c38e7c..e874f75822 100644
--- a/.github/workflows/crates-release.yml
+++ b/.github/workflows/crates-release.yml
@@ -6,7 +6,7 @@ on:
   workflow_dispatch: {}
 jobs:
   publish:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       id-token: write     # Required for OIDC token exchange
     steps:
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 464cf26e44..c9e9c6824f 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -16,7 +16,7 @@ concurrency:
 
 jobs:
   build:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@v7
       - name: Bootc Ubuntu Setup