diff --git a/.github/actions/install-tmt/action.yml b/.github/actions/install-tmt/action.yml
index 9b65b31da..7ca006b73 100644
--- a/.github/actions/install-tmt/action.yml
+++ b/.github/actions/install-tmt/action.yml
@@ -4,9 +4,9 @@ runs:
   using: 'composite'
   steps:
     - name: Set up Python
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@v7
       with:
-        python-version: '3.12.14'
+        python-version: '3.15.0'
     - name: Install tmt
       shell: bash
       run: |
diff --git a/.github/workflows/auto-review.yml b/.github/workflows/auto-review.yml
index 33ebb80e4..a5e504850 100644
--- a/.github/workflows/auto-review.yml
+++ b/.github/workflows/auto-review.yml
@@ -19,7 +19,7 @@ jobs:
       - name: Setup Python
         uses: actions/setup-python@v7
         with:
-          python-version: '3.14'
+          python-version: '3.15'
 
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/build-and-publish.yml b/.github/workflows/build-and-publish.yml
index ac75eff26..14f1a5b2d 100644
--- a/.github/workflows/build-and-publish.yml
+++ b/.github/workflows/build-and-publish.yml
@@ -24,7 +24,7 @@ jobs:
           # centos-9 UKI is experimental/broken (https://github.com/bootc-dev/bootc/issues/1812)
           - test_os: centos-9
             variant: composefs-sealeduki-sdboot
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@v7
       - name: Bootc Ubuntu Setup
diff --git a/.github/workflows/crates-release.yml b/.github/workflows/crates-release.yml
index 63a5c38e7..e874f7582 100644
--- a/.github/workflows/crates-release.yml
+++ b/.github/workflows/crates-release.yml
@@ -6,7 +6,7 @@ on:
   workflow_dispatch: {}
 jobs:
   publish:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       id-token: write     # Required for OIDC token exchange
     steps:
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 464cf26e4..c9e9c6824 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -16,7 +16,7 @@ concurrency:
 
 jobs:
   build:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@v7
       - name: Bootc Ubuntu Setup
diff --git a/crates/ostree-ext/.github/workflows/rust.yml b/crates/ostree-ext/.github/workflows/rust.yml
index b6c3fed64..9918d4836 100644
--- a/crates/ostree-ext/.github/workflows/rust.yml
+++ b/crates/ostree-ext/.github/workflows/rust.yml
@@ -105,7 +105,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v7
       - name: Download ostree-ext-cli
-        uses: actions/download-artifact@v8.0.1
+        uses: actions/download-artifact@v8.0.2
         with:
           name: ostree-ext-cli
       - name: Install
@@ -121,7 +121,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v7
       - name: Download ostree-ext-cli
-        uses: actions/download-artifact@v8.0.1
+        uses: actions/download-artifact@v8.0.2
         with:
           name: ostree-ext-cli
       - name: Install
@@ -139,7 +139,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v7
       - name: Download
-        uses: actions/download-artifact@v8.0.1
+        uses: actions/download-artifact@v8.0.2
         with:
           name: ostree-ext-cli
       - name: Install
@@ -159,7 +159,7 @@ jobs:
           repository: coreos/coreos-layering-examples
           path: coreos-layering-examples
       - name: Download
-        uses: actions/download-artifact@v8.0.1
+        uses: actions/download-artifact@v8.0.2
         with:
           name: ostree-ext-cli
       - name: Integration tests