Update dependency ubuntu to v26

.github/workflows/ci-security.yml

@@ -36,7 +36,7 @@ permissions:
 jobs:
   zizmor:
     name: Zizmor
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
       security-events: write
@@ -59,7 +59,7 @@ jobs:
   codeql:
     name: CodeQL Analyze
     if: github.repository_owner == 'apache'
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
       security-events: write

.github/workflows/ci.yml

@@ -29,7 +29,7 @@ on:
 jobs:
   build-checks:
     name: Gradle Build Checks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     steps:
@@ -91,7 +91,7 @@ jobs:
 
   runtime-service-tests:
     name: Runtime Service Tests
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     steps:
@@ -120,7 +120,7 @@ jobs:
 
   runtime-service-int-tests:
     name: Runtime Service Integration Tests
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     steps:
@@ -147,7 +147,7 @@ jobs:
 
   admin-tool-tests:
     name: Admin Tool Tests
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     steps:
@@ -174,7 +174,7 @@ jobs:
 
   integration-tests:
     name: Other Integration Tests
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     steps:
@@ -207,7 +207,7 @@ jobs:
 
   docker-image-build:
     name: Polaris Docker Image Build
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 30
     permissions:
       contents: read
@@ -249,7 +249,7 @@ jobs:
   docker-image-scan:
     name: Polaris Docker Image Scan
     if: github.repository == 'apache/polaris'
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs:
       - docker-image-build
     timeout-minutes: 20
@@ -308,7 +308,7 @@ jobs:
 
   helm-tests:
     name: Helm Tests (Helm ${{ matrix.helm-version }} - K8s ${{ matrix.kubernetes-version }})
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs:
       - docker-image-build
     timeout-minutes: 60
@@ -404,7 +404,7 @@ jobs:
 
   python-client:
     name: Polaris Python Client Tests
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     needs:
@@ -440,7 +440,7 @@ jobs:
 
   regtest:
     name: Regression Tests (${{ matrix.s3-backend }})
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     needs:
@@ -496,7 +496,7 @@ jobs:
   markdown-link-check:
     name: "Markdown Link Check"
     if: github.repository == 'apache/polaris'
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     steps:
@@ -516,7 +516,7 @@ jobs:
 
   site:
     name: "Site Generation"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     steps:
@@ -547,7 +547,7 @@ jobs:
         run: site/bin/create-static-site.sh
 
   test-site-guides:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:

.github/workflows/nightly-iceberg.yml

@@ -51,7 +51,7 @@ env:
 jobs:
   smoke-tests:
     name: Smoke Tests (Iceberg Nightly)
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     if: github.repository == 'apache/polaris'
     steps:
       - name: Detect latest Iceberg snapshot version

.github/workflows/nightly.yml

@@ -47,7 +47,7 @@ env:
 
 jobs:
   nightly_build:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     if: github.repository == 'apache/polaris'
     steps:
       - name: Checkout
@@ -74,7 +74,7 @@ jobs:
           DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }} # zizmor: ignore[secrets-outside-env]
 
   nightly_build_python_client:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     if: github.repository == 'apache/polaris'
     permissions:
       # IMPORTANT: this permission is mandatory for Trusted Publishing to PyPI

.github/workflows/release-1-create-release-branch.yml

@@ -35,7 +35,7 @@ on:
 jobs:
   create-release-branch:
     name: Release - 1 - Create Release Branch
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
 

.github/workflows/release-2-update-release-candidate.yml

@@ -31,7 +31,7 @@ on:
 jobs:
   update-release-candidate:
     name: Release - 2 - Update version and Changelog for Release Candidate
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
 

.github/workflows/release-3-build-and-publish-artifacts.yml

@@ -31,7 +31,7 @@ on:
 jobs:
   prerequisite-checks:
     name: Prerequisite Checks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     outputs:
@@ -119,7 +119,7 @@ jobs:
 
   build-and-publish-artifacts:
     name: Build and Publish Release Artifacts
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: prerequisite-checks
     permissions:
       contents: read
@@ -254,7 +254,7 @@ jobs:
 
   build-docker:
     name: Build Docker Images
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: [prerequisite-checks, build-and-publish-artifacts]
     permissions:
       contents: read
@@ -327,7 +327,7 @@ jobs:
 
   build-and-stage-helm-chart:
     name: Build and Stage Helm Chart
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: [prerequisite-checks, build-docker]
     permissions:
       contents: read
@@ -525,7 +525,7 @@ jobs:
 
   publish-python-client-rc:
     name: Publish Python Client RC to PyPI
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: [prerequisite-checks]
     permissions:
       contents: read
@@ -640,7 +640,7 @@ jobs:
 
   generate-release-email:
     name: Generate Release Email Body
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs:
       - prerequisite-checks
       - build-and-publish-artifacts

.github/workflows/release-4-publish-release.yml

@@ -35,7 +35,7 @@ on:
 jobs:
   publish-release:
     name: Release - 4 - Publish Release After Vote Success
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
     outputs:
@@ -418,7 +418,7 @@ jobs:
 
   publish-python-client:
     name: Publish Python Client to PyPI
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: [publish-release]
     permissions:
       contents: read

.github/workflows/release-X-cancel-release-candidate.yml

@@ -37,7 +37,7 @@ on:
 jobs:
   cancel-release-candidate:
     name: Release - X - Cancel Release Candidate After Vote Failure
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
 

.github/workflows/site.yml

@@ -40,7 +40,7 @@ concurrency:
 jobs:
   site:
 
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
 
     # This condition, which ensures the workflow is only run within the 'apache/polaris' repo, serves two purposes:
     # 1. Not triggering the workflow from any other repo, as it declares a 'workflow_call' trigger (security).