diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
index 3ff299e7f90..fb838efd64c 100644
--- a/.github/workflows/codespell.yml
+++ b/.github/workflows/codespell.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   codespell:
     name: Check spelling
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
       - name: Check out code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/collabora.yml b/.github/workflows/collabora.yml
index 0e5b9ed45ec..d63cc0fe4f3 100644
--- a/.github/workflows/collabora.yml
+++ b/.github/workflows/collabora.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   collabora-update:
     name: update collabora
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Run collabora-profile-update
diff --git a/.github/workflows/community-containers.yml b/.github/workflows/community-containers.yml
index 59fe249f6cb..070a240994d 100644
--- a/.github/workflows/community-containers.yml
+++ b/.github/workflows/community-containers.yml
@@ -13,7 +13,7 @@ on:
 jobs:
   validator-community-containers:
     name: Validate community containers
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/dependency-updates.yml b/.github/workflows/dependency-updates.yml
index fb3bed7fbf2..e72d66b8f0d 100644
--- a/.github/workflows/dependency-updates.yml
+++ b/.github/workflows/dependency-updates.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   dependency_updates:
     name: Run dependency update script
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - uses: shivammathur/setup-php@7bf05c6b704e0b9bfee22300130a31b5ea68d593 # v2
diff --git a/.github/workflows/desec-api-version-watch.yml b/.github/workflows/desec-api-version-watch.yml
index 770b251a443..eb595206961 100644
--- a/.github/workflows/desec-api-version-watch.yml
+++ b/.github/workflows/desec-api-version-watch.yml
@@ -20,7 +20,7 @@ on:
 jobs:
   watch:
     name: Compare deSEC API version table against baseline
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     steps:
       - name: Check deSEC API version table
diff --git a/.github/workflows/docker-lint.yml b/.github/workflows/docker-lint.yml
index 1db918f6531..fc56942bbbf 100644
--- a/.github/workflows/docker-lint.yml
+++ b/.github/workflows/docker-lint.yml
@@ -19,7 +19,7 @@ concurrency:
 
 jobs:
   docker-lint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
 
     name: docker-lint
 
diff --git a/.github/workflows/fail-on-prerelease.yml b/.github/workflows/fail-on-prerelease.yml
index 823702b6b8a..d90df62e83b 100644
--- a/.github/workflows/fail-on-prerelease.yml
+++ b/.github/workflows/fail-on-prerelease.yml
@@ -8,7 +8,7 @@ permissions:
 
 jobs:
   check-latest-release:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
       - name: "Check latest published release isn't a prerelease"
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v6
diff --git a/.github/workflows/helm-release.yml b/.github/workflows/helm-release.yml
index bc9011e1a34..71d19c5f786 100644
--- a/.github/workflows/helm-release.yml
+++ b/.github/workflows/helm-release.yml
@@ -13,7 +13,7 @@ jobs:
     # Do not run this workflow on forked repositories, as they might not have the `gh-pages` branch created, or might
     # want to use it for other purposes than publishing helm charts
     if: github.repository == 'nextcloud/all-in-one'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/imaginary-update.yml b/.github/workflows/imaginary-update.yml
index 3829b984ad6..9c88571b8a7 100644
--- a/.github/workflows/imaginary-update.yml
+++ b/.github/workflows/imaginary-update.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   run_update:
     name: update to latest imaginary commit on master branch
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Run imaginary-update
diff --git a/.github/workflows/json-validator.yml b/.github/workflows/json-validator.yml
index 9f2d49dd350..a4b45b56142 100644
--- a/.github/workflows/json-validator.yml
+++ b/.github/workflows/json-validator.yml
@@ -13,7 +13,7 @@ on:
 jobs:
   json-validator:
     name: Json Validator
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/lint-helm.yml b/.github/workflows/lint-helm.yml
index d7c73188f49..a3f7ceeb94f 100644
--- a/.github/workflows/lint-helm.yml
+++ b/.github/workflows/lint-helm.yml
@@ -8,7 +8,7 @@ on:
 
 jobs:
   lint-helm:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/lint-php.yml b/.github/workflows/lint-php.yml
index bc4d97443c9..91dac20a722 100644
--- a/.github/workflows/lint-php.yml
+++ b/.github/workflows/lint-php.yml
@@ -27,7 +27,7 @@ concurrency:
 
 jobs:
   php-lint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     strategy:
       matrix:
         php-versions: [ "8.5" ]
@@ -55,7 +55,7 @@ jobs:
   summary:
     permissions:
       contents: none
-    runs-on: ubuntu-latest-low
+    runs-on: ubuntu-26.04
     needs: php-lint
 
     if: always()
diff --git a/.github/workflows/lint-yaml.yml b/.github/workflows/lint-yaml.yml
index ed237649c39..9123dc461f3 100644
--- a/.github/workflows/lint-yaml.yml
+++ b/.github/workflows/lint-yaml.yml
@@ -18,7 +18,7 @@ permissions:
 
 jobs:
   yaml-lint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
 
     name: yaml
 
diff --git a/.github/workflows/lock-threads.yml b/.github/workflows/lock-threads.yml
index 1affd0f4bd6..8ef3968c9cd 100644
--- a/.github/workflows/lock-threads.yml
+++ b/.github/workflows/lock-threads.yml
@@ -12,7 +12,7 @@ concurrency:
 
 jobs:
   action:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
       - uses: dessant/lock-threads@89ae32b08ed1a541efecbab17912962a5e38981c # v5
         with: 
diff --git a/.github/workflows/nextcloud-update.yml b/.github/workflows/nextcloud-update.yml
index eed760395e7..47639587702 100644
--- a/.github/workflows/nextcloud-update.yml
+++ b/.github/workflows/nextcloud-update.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   run_update_sh:
     name: Run nextcloud-update script
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Run nextcloud-update script
diff --git a/.github/workflows/php-deprecation-detector.yml b/.github/workflows/php-deprecation-detector.yml
index 975bde58ab6..47b6041a009 100644
--- a/.github/workflows/php-deprecation-detector.yml
+++ b/.github/workflows/php-deprecation-detector.yml
@@ -14,7 +14,7 @@ on:
 jobs:
   phpdd:
     name: PHP Deprecation Detector
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Set up php
diff --git a/.github/workflows/playwright-on-push.yml b/.github/workflows/playwright-on-push.yml
index bf977f33879..bf7cc7a4280 100644
--- a/.github/workflows/playwright-on-push.yml
+++ b/.github/workflows/playwright-on-push.yml
@@ -25,7 +25,7 @@ jobs:
   test:
     timeout-minutes: 60
 
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
 
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/psalm-update-baseline.yml b/.github/workflows/psalm-update-baseline.yml
index dca8f16ba07..91c90f74536 100644
--- a/.github/workflows/psalm-update-baseline.yml
+++ b/.github/workflows/psalm-update-baseline.yml
@@ -7,7 +7,7 @@ on:
 
 jobs:
   update-psalm-baseline:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
 
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/psalm.yml b/.github/workflows/psalm.yml
index 9d03775f79f..44880bc7f7a 100644
--- a/.github/workflows/psalm.yml
+++ b/.github/workflows/psalm.yml
@@ -27,7 +27,7 @@ permissions:
 
 jobs:
   static-analysis:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
 
     name: static-psalm-analysis
     steps:
diff --git a/.github/workflows/shellcheck.yml b/.github/workflows/shellcheck.yml
index 79ea65fc494..60692d2adb9 100644
--- a/.github/workflows/shellcheck.yml
+++ b/.github/workflows/shellcheck.yml
@@ -13,7 +13,7 @@ on:
 jobs:
   shellcheck:
     name: Check Shell
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Run Shellcheck
diff --git a/.github/workflows/sync-workflow-templates.yml b/.github/workflows/sync-workflow-templates.yml
index 3901b7ae294..39e9d66d38f 100644
--- a/.github/workflows/sync-workflow-templates.yml
+++ b/.github/workflows/sync-workflow-templates.yml
@@ -19,7 +19,7 @@ permissions:
 
 jobs:
   dispatch:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
 
     strategy:
       fail-fast: false
diff --git a/.github/workflows/talk.yml b/.github/workflows/talk.yml
index 466b7adbb48..fb37a99f7fe 100644
--- a/.github/workflows/talk.yml
+++ b/.github/workflows/talk.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   talk-update:
     name: update talk
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Run talk-container-update
diff --git a/.github/workflows/twig-lint.yml b/.github/workflows/twig-lint.yml
index cd02f3ff312..f0f192c8528 100644
--- a/.github/workflows/twig-lint.yml
+++ b/.github/workflows/twig-lint.yml
@@ -19,7 +19,7 @@ concurrency:
 
 jobs:
   twig-lint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     name: twig-lint
 
     steps:
diff --git a/.github/workflows/update-copyright.yml b/.github/workflows/update-copyright.yml
index 4cda9fc44f1..35bf79a00f8 100644
--- a/.github/workflows/update-copyright.yml
+++ b/.github/workflows/update-copyright.yml
@@ -6,6 +6,6 @@ on:
 jobs:
   update-copyright:
     name: update copyright
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/update-helm.yml b/.github/workflows/update-helm.yml
index 2289fc73c06..a95aaf1b53c 100644
--- a/.github/workflows/update-helm.yml
+++ b/.github/workflows/update-helm.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   update-helm:
     name: update helm chart
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/update-test-container-image-references.yml b/.github/workflows/update-test-container-image-references.yml
index 2f44d746018..2c782e5ef00 100644
--- a/.github/workflows/update-test-container-image-references.yml
+++ b/.github/workflows/update-test-container-image-references.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   update:
     name: Update test container image references
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Install skopeo
diff --git a/.github/workflows/update-yaml.yml b/.github/workflows/update-yaml.yml
index f5132f77b3b..c5a5d1b1b46 100644
--- a/.github/workflows/update-yaml.yml
+++ b/.github/workflows/update-yaml.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   update-yaml:
     name: update yaml files
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/watchtower-update.yml b/.github/workflows/watchtower-update.yml
index 61e2ece562b..b9f834c5999 100644
--- a/.github/workflows/watchtower-update.yml
+++ b/.github/workflows/watchtower-update.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   watchtower-update:
     name: update watchtower
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Run watchtower-container-update
diff --git a/.github/workflows/wg-easy-update.yml b/.github/workflows/wg-easy-update.yml
index 0ffceea9d17..deadc0d027e 100644
--- a/.github/workflows/wg-easy-update.yml
+++ b/.github/workflows/wg-easy-update.yml
@@ -11,7 +11,7 @@ permissions:
 jobs:
   run_update:
     name: update wg-easy to the latest major release
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write