diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 76368727..ab0da8c4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -17,11 +17,11 @@ permissions:
 jobs:
   build:
     name: Build and Test
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
 
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup Go
       uses: actions/setup-go@v6
@@ -46,11 +46,11 @@ jobs:
   
   vet:
     name: Go Vet / Format
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
 
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup Go
       uses: actions/setup-go@v6
@@ -67,12 +67,12 @@ jobs:
   analysis:
     name: Analyze with Sonar Cloud
     needs: build
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     environment: build
     steps:
     
     - name: Check out code for Sonar Analysis
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: 0
     
diff --git a/.github/workflows/pr-docker-build.yaml b/.github/workflows/pr-docker-build.yaml
index 07790f2a..c7fe295b 100644
--- a/.github/workflows/pr-docker-build.yaml
+++ b/.github/workflows/pr-docker-build.yaml
@@ -14,7 +14,7 @@ jobs:
     strategy:
       matrix:
         workload: ["controller", "server", "web-hooks"]
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     outputs:
@@ -22,7 +22,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup Docker Buildx
       uses: docker/setup-buildx-action@v4
@@ -70,7 +70,7 @@ jobs:
     name: PR Docker Image Summary
     needs: build-on-label
     if: success()
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     steps:
diff --git a/.github/workflows/publish-docker.yaml b/.github/workflows/publish-docker.yaml
index 1767b1b5..057104b7 100644
--- a/.github/workflows/publish-docker.yaml
+++ b/.github/workflows/publish-docker.yaml
@@ -21,14 +21,14 @@ defaults:
 jobs:
   publish-docker:
     name: Publish Docker image
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: write # needed for SBOM upload
       packages: write
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup Docker Buildx
       uses: docker/setup-buildx-action@v4
diff --git a/.github/workflows/publish-website.yaml b/.github/workflows/publish-website.yaml
index 46ffd95f..c06e8f35 100644
--- a/.github/workflows/publish-website.yaml
+++ b/.github/workflows/publish-website.yaml
@@ -24,17 +24,17 @@ defaults:
 
 jobs:
   build:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Setup Pages
         id: pages
         uses: actions/configure-pages@v6
       - name: Setup Hugo
         uses: peaceiris/actions-hugo@v3
         with:
-          hugo-version: "0.163.0"
+          hugo-version: "0.163.3"
           extended: true
       - name: Setup Node
         uses: actions/setup-node@v6
@@ -64,7 +64,7 @@ jobs:
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: build
 
     steps:
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 4832d85a..67a64f20 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -14,11 +14,11 @@ permissions:
 jobs:
   generate_crd:
     name: Generate CRD
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       
       - name: Generate and Upload CRD
         run: |
diff --git a/.github/workflows/scan-container.yaml b/.github/workflows/scan-container.yaml
index 78f29085..e7d07dd2 100644
--- a/.github/workflows/scan-container.yaml
+++ b/.github/workflows/scan-container.yaml
@@ -22,14 +22,14 @@ jobs:
     strategy:
       matrix:
         workload: ["controller", "server", "web-hooks"]
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Run trivy scanner
         uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: ghcr.io/sap/cap-operator/${{ matrix.workload }}:${{ inputs.version || 'latest' }}
           scanners: 'vuln'
-          version: 'v0.70.0'
+          version: 'v0.72.0'
           format: 'sarif'
           output: 'vuln-${{ matrix.workload }}.sarif'
 
diff --git a/go.mod b/go.mod
index 4d446ae3..5fb26f2c 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/sap/cap-operator
 
-go 1.26.4
+go 1.26.5
 
 require (
 	github.com/MicahParks/jwkset v0.11.0