diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f528d99..6d70ff2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,7 +22,7 @@ env:
 jobs:
   fmt:
     name: Format
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@v7
@@ -33,7 +33,7 @@ jobs:
 
   clippy:
     name: Clippy ${{ matrix.target }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 20
     strategy:
       fail-fast: false
@@ -60,7 +60,7 @@ jobs:
 
   test:
     name: Test
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@v7
@@ -80,7 +80,7 @@ jobs:
 
   msrv:
     name: MSRV
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@v7
@@ -97,7 +97,7 @@ jobs:
 
   tauri-plugin:
     name: tauri-plugin-pushups
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 30
     defaults:
       run:
@@ -121,7 +121,7 @@ jobs:
 
   docs:
     name: Docs
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@v7
@@ -132,7 +132,7 @@ jobs:
 
   android-coverage:
     name: Android ${{ matrix.api }} on an emulator
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 60
     strategy:
       fail-fast: false
@@ -188,7 +188,7 @@ jobs:
 
   web-coverage:
     name: Web in Chrome and Firefox
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 30
     steps:
       - uses: actions/checkout@v7
@@ -220,7 +220,7 @@ jobs:
 
   linux-coverage:
     name: Linux through a UnifiedPush distributor
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 30
     # A fork's pull request gets no secrets, so it pulls anonymously.
     env:
@@ -249,7 +249,7 @@ jobs:
 
   example-linux:
     name: Example apps on Linux through a UnifiedPush distributor
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 45
     strategy:
       fail-fast: false
@@ -277,7 +277,7 @@ jobs:
   coverage:
     name: Coverage
     needs: [android-coverage, linux-coverage, web-coverage]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 30
     # Neither a fork's pull request nor a Dependabot run can read CODECOV_TOKEN.
     if: >-
@@ -303,7 +303,7 @@ jobs:
 
   example-android:
     name: Example APK
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 45
     steps:
       - uses: actions/checkout@v7
@@ -327,7 +327,7 @@ jobs:
 
   example-android-emulator:
     name: Example app on an Android emulator
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 60
     # Neither a fork's pull request nor a Dependabot run can read the Firebase secrets.
     if: >-
@@ -361,7 +361,7 @@ jobs:
 
   example-winit-android:
     name: Example winit app through Gradle on an Android emulator
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 60
     # Neither a fork's pull request nor a Dependabot run can read the Firebase secrets.
     if: >-
@@ -405,7 +405,7 @@ jobs:
 
   example-tauri-android:
     name: Example Tauri app through tauri-plugin-pushups on an Android emulator
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 60
     # Neither a fork's pull request nor a Dependabot run can read the Firebase secrets.
     if: >-
@@ -444,7 +444,7 @@ jobs:
 
   example-web:
     name: Example web app in Chrome
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 30
     steps:
       - uses: actions/checkout@v7
@@ -468,7 +468,7 @@ jobs:
 
   example-trunk:
     name: Example ${{ matrix.name }} app on Trunk in Chrome
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 30
     strategy:
       fail-fast: false
@@ -501,7 +501,7 @@ jobs:
 
   example-leptos:
     name: Example Leptos SSR app in Chrome
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 45
     steps:
       - uses: actions/checkout@v7
diff --git a/.github/workflows/echoes-post.yml b/.github/workflows/echoes-post.yml
index 6fe92ea..f868223 100644
--- a/.github/workflows/echoes-post.yml
+++ b/.github/workflows/echoes-post.yml
@@ -12,7 +12,7 @@ jobs:
   review:
     name: Review the duplicates a pull request adds
     if: github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion == 'success'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     permissions:
       actions: read
diff --git a/.github/workflows/echoes.yml b/.github/workflows/echoes.yml
index c9999e5..fd1e9c5 100644
--- a/.github/workflows/echoes.yml
+++ b/.github/workflows/echoes.yml
@@ -9,7 +9,7 @@ permissions:
 jobs:
   scan:
     name: Duplicates a pull request adds
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@v7
diff --git a/.github/workflows/release-aar.yml b/.github/workflows/release-aar.yml
index aeab5a1..97f58ba 100644
--- a/.github/workflows/release-aar.yml
+++ b/.github/workflows/release-aar.yml
@@ -18,7 +18,7 @@ concurrency:
 jobs:
   aar:
     name: Publish the Android module to Maven Central
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 60
     steps:
       - uses: actions/checkout@v7