diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d30555d8..3212f336 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -56,9 +56,9 @@ jobs:
           --health-timeout 5s
           --health-retries 3
       postgres:
-        # Use postgres:14 for CLI compatibility with ubuntu-latest, currently ubuntu-22.04
-        # See https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2204-Readme.md
-        image: postgres:14
+        # Use postgres:18 for CLI compatibility with ubuntu-latest, currently ubuntu-26.04
+        # See https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2604-Readme.md
+        image: postgres:18
         env:
           POSTGRES_USER: postgres
           POSTGRES_PASSWORD: password
diff --git a/.github/workflows/database-e2e.yml b/.github/workflows/database-e2e.yml
index 97f1db29..6c6e8ae3 100644
--- a/.github/workflows/database-e2e.yml
+++ b/.github/workflows/database-e2e.yml
@@ -91,7 +91,7 @@ jobs:
           --health-timeout 5s
           --health-retries 3
       postgres:
-        image: postgres:14
+        image: postgres:18
         env:
           POSTGRES_USER: postgres
           POSTGRES_PASSWORD: password
@@ -136,7 +136,7 @@ jobs:
               ;;
           esac
       - name: Set up Ruby
-        uses: ruby/setup-ruby@0cb964fd540e0a24c900370abf38a33466142735 # zizmor: ignore[cache-poisoning]
+        uses: ruby/setup-ruby@7f797815d8adceb1c412e7abefdd1ab4abc47a5f # zizmor: ignore[cache-poisoning]
         with:
           ruby-version: ${{ matrix.ruby }}
           bundler-cache: true
diff --git a/.github/workflows/repo-sync-extensions/ci-services.yml b/.github/workflows/repo-sync-extensions/ci-services.yml
index a6de75a3..660bcaeb 100644
--- a/.github/workflows/repo-sync-extensions/ci-services.yml
+++ b/.github/workflows/repo-sync-extensions/ci-services.yml
@@ -10,9 +10,9 @@ mysql:
     --health-timeout 5s
     --health-retries 3
 postgres:
-  # Use postgres:14 for CLI compatibility with ubuntu-latest, currently ubuntu-22.04
-  # See https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2204-Readme.md
-  image: postgres:14
+  # Use postgres:18 for CLI compatibility with ubuntu-latest, currently ubuntu-26.04
+  # See https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2604-Readme.md
+  image: postgres:18
   env:
     POSTGRES_USER: postgres
     POSTGRES_PASSWORD: password