chore(deps): update dependency ubuntu to v26

.github/workflows/backport.yml

@@ -13,7 +13,7 @@ jobs:
   backport:
     name: Backport Pull Request
     if: github.event.pull_request.merged == true && (github.event.action != 'labeled' || startsWith(github.event.label.name, 'backport'))
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 3
     steps:
       - uses: actions/checkout@v7

.github/workflows/ci.yml

@@ -57,7 +57,7 @@ jobs:
   # They run their own paths-filter because the reusable workflow doesn't (currently)
   # expose its filter outputs back to the caller.
   filter:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     outputs:
       docs: ${{ steps.filter.outputs.docs }}
       ent: ${{ steps.filter.outputs.ent }}
@@ -81,7 +81,7 @@ jobs:
     # Vendor-hash regeneration moved to gh-actions/generate.yml via the shared
     # workflow's `languages.go.targets`. This job now only handles Ent codegen.
     if: (github.event_name == 'workflow_dispatch' || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == false)) && needs.filter.outputs.ent == 'true'
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
@@ -106,7 +106,7 @@ jobs:
       pull-requests: write
     needs: filter
     if: (github.event_name == 'workflow_dispatch' || github.event_name == 'push' || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == false)) && needs.filter.outputs.docs == 'true'
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
@@ -138,7 +138,7 @@ jobs:
             })
   # ---- Final gate over the reusable workflow + sibling jobs ------------------------
   ci:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     if: always()
     needs:
       - shared

.github/workflows/devskim.yml

@@ -11,7 +11,7 @@ on:
 jobs:
   lint:
     name: DevSkim
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       actions: read
       contents: read

.github/workflows/e2e-nightly.yml

@@ -21,7 +21,7 @@ concurrency:
   cancel-in-progress: false
 jobs:
   gate:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     outputs:
       sha: ${{ steps.resolve.outputs.sha }}
       skip: ${{ steps.decide.outputs.skip }}
@@ -59,7 +59,7 @@ jobs:
   e2e:
     needs: gate
     if: needs.gate.outputs.skip != 'true'
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     strategy:
       fail-fast: false
       matrix:
@@ -94,7 +94,7 @@ jobs:
     # failure leaves the cache untouched and the next schedule retries the same
     # commit.
     if: ${{ needs.gate.outputs.skip != 'true' && needs.e2e.result == 'success' }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Stamp the tested SHA
         run: |

.github/workflows/fuzz.yml

@@ -8,7 +8,7 @@ permissions:
   issues: write
 jobs:
   fuzz:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     strategy:
       fail-fast: false
       matrix:

.github/workflows/helm.yml

@@ -6,7 +6,7 @@ on:
   workflow_call:
 jobs:
   helm:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout
         uses: actions/checkout@v7

.github/workflows/releases.yml

@@ -29,7 +29,7 @@ jobs:
     uses: ./.github/workflows/helm.yml
     needs: build
   release:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: build
     permissions:
       contents: write

.github/workflows/semantic-pull-request.yml

@@ -14,7 +14,7 @@ permissions:
 jobs:
   validate-pr-title:
     name: Validate PR title
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: amannn/action-semantic-pull-request@v6
         env: