[Misc] action workflows and go version updated

.github/workflows/build.yml

@@ -17,11 +17,11 @@ permissions:
 jobs:
   build:
     name: Build and Test
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
 
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup Go
       uses: actions/setup-go@v6
@@ -46,11 +46,11 @@ jobs:
 
   vet:
     name: Go Vet / Format
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
 
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup Go
       uses: actions/setup-go@v6
@@ -67,12 +67,12 @@ jobs:
   analysis:
     name: Analyze with Sonar Cloud
     needs: build
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     environment: build
     steps:
 
     - name: Check out code for Sonar Analysis
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         fetch-depth: 0
 

.github/workflows/pr-docker-build.yaml

@@ -14,15 +14,15 @@ jobs:
     strategy:
       matrix:
         workload: ["controller", "server", "web-hooks"]
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     outputs:
       pr-number: ${{ github.event.pull_request.number }}
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup Docker Buildx
       uses: docker/setup-buildx-action@v4
@@ -70,7 +70,7 @@ jobs:
     name: PR Docker Image Summary
     needs: build-on-label
     if: success()
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     steps:

.github/workflows/publish-docker.yaml

@@ -21,14 +21,14 @@ defaults:
 jobs:
   publish-docker:
     name: Publish Docker image
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: write # needed for SBOM upload
       packages: write
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Setup Docker Buildx
       uses: docker/setup-buildx-action@v4

.github/workflows/publish-website.yaml

@@ -24,17 +24,17 @@ defaults:
 
 jobs:
   build:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Setup Pages
         id: pages
         uses: actions/configure-pages@v6
       - name: Setup Hugo
         uses: peaceiris/actions-hugo@v3
         with:
-          hugo-version: "0.163.0"
+          hugo-version: "0.163.3"
           extended: true
       - name: Setup Node
         uses: actions/setup-node@v6
@@ -64,7 +64,7 @@ jobs:
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: build
 
     steps:

.github/workflows/publish.yaml

@@ -14,11 +14,11 @@ permissions:
 jobs:
   generate_crd:
     name: Generate CRD
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Generate and Upload CRD
         run: |

.github/workflows/scan-container.yaml

@@ -22,14 +22,14 @@ jobs:
     strategy:
       matrix:
         workload: ["controller", "server", "web-hooks"]
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Run trivy scanner
         uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: ghcr.io/sap/cap-operator/${{ matrix.workload }}:${{ inputs.version || 'latest' }}
           scanners: 'vuln'
-          version: 'v0.70.0'
+          version: 'v0.72.0'
           format: 'sarif'
           output: 'vuln-${{ matrix.workload }}.sarif'
 

go.mod

@@ -1,6 +1,6 @@
 module github.com/sap/cap-operator
 
-go 1.26.4
+go 1.26.5
 
 require (
 	github.com/MicahParks/jwkset v0.11.0