diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index faf4705f..c037948e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,7 +22,7 @@ concurrency:
 jobs:
   gates:
     name: static gates
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     steps:
       - name: Check out
@@ -99,7 +99,7 @@ jobs:
 
   suites:
     name: suite shard ${{ matrix.shard }}/4
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     strategy:
       fail-fast: false
@@ -158,7 +158,7 @@ jobs:
     # push cancelled this run: a superseded run is not a red check on main.
     if: ${{ !cancelled() }}
     needs: [gates, suites]
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     steps:
       - name: Require every gate and shard
diff --git a/.github/workflows/record-tier0.yml b/.github/workflows/record-tier0.yml
index ad70aca2..e662dde1 100644
--- a/.github/workflows/record-tier0.yml
+++ b/.github/workflows/record-tier0.yml
@@ -80,7 +80,7 @@ jobs:
     # verified green by CI". See bench/README's "CI recording coverage"
     # section for the reader-facing statement of this same boundary.
     if: github.event.workflow_run.conclusion == 'success'
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 5
     permissions:
       # The only permission this workflow needs beyond the read-only