Update ubuntu Docker tag to v26

.github/workflows/c-coverage.yml

@@ -12,7 +12,7 @@ on: # yamllint disable-line rule:truthy
 jobs:
   coverage:
     name: C/C++ CMake CI Coverage
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
 
     steps:
       - name: Checkout repository

.github/workflows/cppcheck.yml

@@ -13,7 +13,7 @@ on: # yamllint disable-line rule:truthy
 jobs:
   lint:
     name: CppCheck Lint
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
 
     steps:
       - name: Checkout repository

.github/workflows/docker-image.yml

@@ -18,7 +18,7 @@ jobs:
 
   build:
     name: "Build Docker images"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
@@ -73,7 +73,7 @@ jobs:
 
   lint:
     name: "Run in docker: LINT"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: build
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
@@ -98,7 +98,7 @@ jobs:
 
   test:
     name: "Run in docker: TEST"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: build
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
@@ -124,7 +124,7 @@ jobs:
   # yamllint disable rule:line-length
   # security:
   #   name: "Snyk Container"
-  #   runs-on: ubuntu-24.04
+  #   runs-on: ubuntu-26.04
   #   needs: build
   #   permissions:
   #     actions: read
@@ -173,7 +173,7 @@ jobs:
 
   scan:
     name: "Trivy"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     needs: build
     permissions:
       actions: read

.github/workflows/gitleaks.yml

@@ -19,7 +19,7 @@ on: # yamllint disable-line rule:truthy
 jobs:
   scan:
     name: gitleaks
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:

.github/workflows/make-coverage-html.yml

@@ -15,7 +15,7 @@ on: # yamllint disable-line rule:truthy
 jobs:
   make-coverage-html:
     name: "Run make coverage/html and verify coverage HTML"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout repository
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6

.github/workflows/markdown-lint.yml

@@ -15,7 +15,7 @@ permissions:
 jobs:
   markdownlint:
     name: Markdown Lint
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
 
     strategy:
       matrix:

.github/workflows/sonarcloud.yml

@@ -11,7 +11,7 @@ on: # yamllint disable-line rule:truthy
 jobs:
   build:
     name: SonarCloud build and run sonar-scanner
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     env:
       # Directory where build-wrapper output will be placed
       BUILD_WRAPPER_OUT_DIR: build

.github/workflows/yamllint.yml

@@ -13,7 +13,7 @@ on: # yamllint disable-line rule:truthy
 jobs:
   lint:
     name: YAML lint
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Checkout repository
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6

Dockerfile

@@ -1,4 +1,4 @@
-ARG BASE_IMAGE_VERSION=ubuntu:noble-20260509.1
+ARG BASE_IMAGE_VERSION=ubuntu:26.04
 FROM ${BASE_IMAGE_VERSION} AS init
 
 ENV WORKDIR=/app
@@ -34,7 +34,7 @@ RUN apt-get -y update && \
   ca-certificates curl git ninja-build unzip zip && \
   rm -rf /var/lib/apt/lists/* && \
   mkdir /opt/vcpkg && \
-  git clone --branch ${VCPKG_VERSION} https://github.com/microsoft/vcpkg "${VCPKG_ROOT}" && \
+  git clone --branch "${VCPKG_VERSION}" https://github.com/microsoft/vcpkg "${VCPKG_ROOT}" && \
   /opt/vcpkg/bootstrap-vcpkg.sh && \
   ln -s /opt/vcpkg/vcpkg /usr/local/bin/vcpkg && \
   rm -rf /var/lib/apt/lists/* && \
@@ -69,9 +69,12 @@ FROM builder AS lint
 RUN apt-get update && \
   apt-get -y install --no-install-recommends --no-install-suggests gnupg software-properties-common && \
   rm -rf /var/lib/apt/lists/*
-ADD https://apt.llvm.org/llvm-snapshot.gpg.key llvm-snapshot.gpg.key
-RUN apt-key add llvm-snapshot.gpg.key && \
-  apt-add-repository -y "deb https://apt.llvm.org/plucky/ llvm-toolchain-plucky-20 main" && \
+
+RUN mkdir -p /etc/apt/keyrings && \
+  curl -fsSL https://apt.llvm.org/llvm-snapshot.gpg.key \
+  | gpg --dearmor -o /etc/apt/keyrings/llvm-snapshot.gpg && \
+  echo "deb [signed-by=/etc/apt/keyrings/llvm-snapshot.gpg] http://apt.llvm.org/resolute/ llvm-toolchain-resolute main" \
+  | tee /etc/apt/sources.list.d/llvm.list && \
   apt-get -y update && \
   apt-get -y install --no-install-recommends --no-install-suggests clang-format-19 && \
   update-alternatives --install /usr/bin/clang-format clang-format $(which clang-format-19) 100 && \
@@ -83,10 +86,16 @@ RUN bash nodesource_setup.sh && \
   npm install -g --ignore-scripts markdownlint-cli@0.47.0 && \
   apt-get -y install --no-install-recommends --no-install-suggests python3-minimal python3-pip && \
   rm /usr/lib/python3.*/EXTERNALLY-MANAGED && \
-  pip install --no-cache-dir yamllint && \
+  apt-get -y install --no-install-recommends --no-install-suggests yamllint && \
   apt-get -y install --no-install-recommends --no-install-suggests cppcheck && \
   rm -rf /var/lib/apt/lists/*
 
+# Tooling test
+RUN clang-format --version && \
+  markdownlint --version && \
+  yamllint --version && \
+  cppcheck --version
+
 # Code source
 COPY ./src ${WORKDIR}/src
 COPY ./vcpkg.json ${WORKDIR}/vcpkg.json