diff --git a/.github/workflows/build-arm64-image.yaml b/.github/workflows/build-arm64-image.yaml
index c4219d1be14..3fd9b5ca9c9 100644
--- a/.github/workflows/build-arm64-image.yaml
+++ b/.github/workflows/build-arm64-image.yaml
@@ -24,7 +24,7 @@ env:
 jobs:
   build:
     name: Build arm64
-    runs-on: ubuntu-22.04-arm
+    runs-on: ubuntu-24.04-arm
     steps:
       - uses: actions/checkout@v4
       - uses: docker/setup-buildx-action@v3
@@ -51,7 +51,7 @@ jobs:
           restore-keys: ${{ runner.os }}-${{ env.GO_FULL_VER }}-arm64-
 
       - name: Scan base image
-        uses: aquasecurity/trivy-action@0.29.0
+        uses: aquasecurity/trivy-action@0.30.0
         env:
           TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
         with:
diff --git a/.github/workflows/build-dpdk-image.yaml b/.github/workflows/build-dpdk-image.yaml
index bd0ead549f5..b2cab524069 100644
--- a/.github/workflows/build-dpdk-image.yaml
+++ b/.github/workflows/build-dpdk-image.yaml
@@ -4,7 +4,7 @@ on: workflow_dispatch
 jobs:
   build:
     name: Build DPDK
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - uses: docker/setup-buildx-action@v3
diff --git a/.github/workflows/build-kube-ovn-base-dpdk.yaml b/.github/workflows/build-kube-ovn-base-dpdk.yaml
index b21d51cc52d..8d6defda092 100644
--- a/.github/workflows/build-kube-ovn-base-dpdk.yaml
+++ b/.github/workflows/build-kube-ovn-base-dpdk.yaml
@@ -4,7 +4,7 @@ on: workflow_dispatch
 jobs:
   build-amd64:
     name: Build AMD64
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - uses: docker/setup-buildx-action@v3
@@ -24,7 +24,7 @@ jobs:
     needs:
       - build-amd64
     name: push
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
 
diff --git a/.github/workflows/build-kube-ovn-base.yaml b/.github/workflows/build-kube-ovn-base.yaml
index 6c2027b5737..6cd0949ff85 100644
--- a/.github/workflows/build-kube-ovn-base.yaml
+++ b/.github/workflows/build-kube-ovn-base.yaml
@@ -10,7 +10,7 @@ jobs:
         - amd64
         - arm64
     name: Build
-    runs-on: ${{ matrix.arch == 'arm64' && 'ubuntu-22.04-arm' || 'ubuntu-22.04' }}
+    runs-on: ${{ matrix.arch == 'arm64' && 'ubuntu-24.04-arm' || 'ubuntu-24.04' }}
     steps:
       - uses: actions/checkout@v4
       - uses: docker/setup-buildx-action@v3
@@ -40,7 +40,7 @@ jobs:
     needs:
       - build
     name: push
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
 
diff --git a/.github/workflows/build-windows.yaml b/.github/workflows/build-windows.yaml
index 592e7d7258c..f06818fe103 100644
--- a/.github/workflows/build-windows.yaml
+++ b/.github/workflows/build-windows.yaml
@@ -28,7 +28,7 @@ env:
 jobs:
   filter:
     name: Path Filter
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     outputs:
       build-ovs-ovn: ${{ steps.filter.outputs.windows-ovs-ovn }}
       build-kube-ovn: ${{ steps.filter.outputs.windows-kube-ovn }}
diff --git a/.github/workflows/build-x86-image.yaml b/.github/workflows/build-x86-image.yaml
index 6e781576a60..e9c08672298 100644
--- a/.github/workflows/build-x86-image.yaml
+++ b/.github/workflows/build-x86-image.yaml
@@ -27,7 +27,7 @@ env:
 jobs:
   build-kube-ovn-base:
     name: Build kube-ovn-base
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     outputs:
       build-base: ${{ steps.build.outputs.build-base }}
     steps:
@@ -87,7 +87,7 @@ jobs:
 
   build-kube-ovn:
     name: Build kube-ovn
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
     - build-kube-ovn-base
     steps:
@@ -152,7 +152,7 @@ jobs:
           docker tag kubeovn/kube-ovn-base:$TAG-debug-amd64 kubeovn/kube-ovn-base:$TAG-debug
 
       - name: Scan base image
-        uses: aquasecurity/trivy-action@0.29.0
+        uses: aquasecurity/trivy-action@0.30.0
         env:
           TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
         with:
@@ -242,7 +242,7 @@ jobs:
 
   build-vpc-nat-gateway:
     name: Build vpc-nat-gateway
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: jlumbroso/free-disk-space@v1.3.1
         with:
@@ -270,7 +270,7 @@ jobs:
 
   build-e2e-binaries:
     name: Build E2E Binaries
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 30
     steps:
       - uses: actions/checkout@v4
@@ -349,7 +349,7 @@ jobs:
   netpol-path-filter:
     name: Network Policy Path Filter
     if: github.event_name != 'pull_request'
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     outputs:
       test-netpol: ${{ steps.filter.outputs.kube-ovn-controller }}
     steps:
@@ -386,7 +386,7 @@ jobs:
     needs:
       - build-kube-ovn
       - build-e2e-binaries
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 60
     strategy:
       fail-fast: false
@@ -456,7 +456,7 @@ jobs:
           restore-keys: ${{ runner.os }}-e2e-go-${{ env.GO_VERSION }}-x86-
 
       - name: Install kind
-        uses: helm/kind-action@v1
+        uses: helm/kind-action@v1.12.0
         with:
           version: v0.20.0
           install_only: true
@@ -478,8 +478,7 @@ jobs:
 
       - name: Create kind cluster
         run: |
-          sudo pip3 install j2cli
-          sudo pip3 install "j2cli[yaml]"
+          pipx install jinjanator
           sudo PATH=~/.local/bin:$PATH make kind-init-${{ matrix.ip-family }}
           sudo cp -r /root/.kube/ ~/.kube/
           sudo chown -R $(id -un). ~/.kube/
@@ -537,7 +536,7 @@ jobs:
       - build-kube-ovn
       - build-e2e-binaries
       - netpol-path-filter
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 90
     strategy:
       fail-fast: false
@@ -604,7 +603,7 @@ jobs:
           restore-keys: ${{ runner.os }}-e2e-go-${{ env.GO_VERSION }}-x86-
 
       - name: Install kind
-        uses: helm/kind-action@v1
+        uses: helm/kind-action@v1.12.0
         with:
           version: v0.20.0
           install_only: true
@@ -626,8 +625,7 @@ jobs:
 
       - name: Create kind cluster
         run: |
-          sudo pip3 install j2cli
-          sudo pip3 install "j2cli[yaml]"
+          pipx install jinjanator
           sudo PATH=~/.local/bin:$PATH make kind-init-${{ matrix.ip-family }}
           sudo cp -r /root/.kube/ ~/.kube/
           sudo chown -R $(id -un). ~/.kube/
@@ -693,7 +691,7 @@ jobs:
     needs:
       - build-kube-ovn
       - netpol-path-filter
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 45
     strategy:
       fail-fast: false
@@ -736,7 +734,7 @@ jobs:
           fi
 
       - name: Install kind
-        uses: helm/kind-action@v1
+        uses: helm/kind-action@v1.12.0
         with:
           version: v0.20.0
           install_only: true
@@ -758,8 +756,7 @@ jobs:
 
       - name: Create kind cluster
         run: |
-          sudo pip3 install j2cli
-          sudo pip3 install "j2cli[yaml]"
+          pipx install jinjanator
           sudo PATH=~/.local/bin:$PATH make kind-init-${{ matrix.ip-family }}
           sudo cp -r /root/.kube/ ~/.kube/
           sudo chown -R $(id -un). ~/.kube/
@@ -822,7 +819,7 @@ jobs:
     needs:
       - build-kube-ovn
       - build-e2e-binaries
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 45
     strategy:
       fail-fast: false
@@ -887,7 +884,7 @@ jobs:
           restore-keys: ${{ runner.os }}-e2e-go-${{ env.GO_VERSION }}-x86-
 
       - name: Install kind
-        uses: helm/kind-action@v1
+        uses: helm/kind-action@v1.12.0
         with:
           version: v0.20.0
           install_only: true
@@ -909,8 +906,7 @@ jobs:
 
       - name: Create kind cluster
         run: |
-          sudo pip3 install j2cli
-          sudo pip3 install "j2cli[yaml]"
+          pipx install jinjanator
           sudo PATH=~/.local/bin:$PATH make kind-init-${{ matrix.ip-family }}
           sudo cp -r /root/.kube/ ~/.kube/
           sudo chown -R $(id -un). ~/.kube/
@@ -970,7 +966,7 @@ jobs:
     needs:
       - build-kube-ovn
       - build-e2e-binaries
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 45
     steps:
       - uses: jlumbroso/free-disk-space@v1.3.1
@@ -1025,7 +1021,7 @@ jobs:
           restore-keys: ${{ runner.os }}-e2e-go-${{ env.GO_VERSION }}-x86-
 
       - name: Install kind
-        uses: helm/kind-action@v1
+        uses: helm/kind-action@v1.12.0
         with:
           version: v0.20.0
           install_only: true
@@ -1044,8 +1040,7 @@ jobs:
 
       - name: Create kind clusters
         run: |
-          sudo pip3 install j2cli
-          sudo pip3 install "j2cli[yaml]"
+          pipx install jinjanator
           sudo PATH=~/.local/bin:$PATH make kind-init-ovn-ic
           sudo cp -r /root/.kube/ ~/.kube/
           sudo chown -R $(id -un). ~/.kube/
@@ -1060,7 +1055,7 @@ jobs:
   chart-installation-test:
     name: Chart Installation Test
     needs: build-kube-ovn
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 30
     steps:
       - uses: jlumbroso/free-disk-space@v1.3.1
@@ -1076,7 +1071,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install kind
-        uses: helm/kind-action@v1
+        uses: helm/kind-action@v1.12.0
         with:
           version: v0.20.0
           install_only: true
@@ -1091,8 +1086,7 @@ jobs:
 
       - name: Create kind cluster
         run: |
-          sudo pip3 install j2cli
-          sudo pip3 install "j2cli[yaml]"
+          pipx install jinjanator
           sudo PATH=~/.local/bin:$PATH make kind-init
           sudo cp -r /root/.kube/ ~/.kube/
           sudo chown -R $(id -un). ~/.kube/
@@ -1106,7 +1100,7 @@ jobs:
   underlay-logical-gateway-installation-test:
     name: Underlay Logical Gateway Installation Test
     needs: build-kube-ovn
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 30
     steps:
       - uses: jlumbroso/free-disk-space@v1.3.1
@@ -1122,7 +1116,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install kind
-        uses: helm/kind-action@v1
+        uses: helm/kind-action@v1.12.0
         with:
           version: v0.20.0
           install_only: true
@@ -1137,8 +1131,7 @@ jobs:
 
       - name: Create kind cluster
         run: |
-          sudo pip3 install j2cli
-          sudo pip3 install "j2cli[yaml]"
+          pipx install jinjanator
           sudo PATH=~/.local/bin:$PATH make kind-init-dual
           sudo cp -r /root/.kube/ ~/.kube/
           sudo chown -R $(id -un). ~/.kube/
@@ -1152,7 +1145,7 @@ jobs:
   no-ovn-lb-test:
     name: Disable OVN LB Test
     needs: build-kube-ovn
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 30
     steps:
       - uses: jlumbroso/free-disk-space@v1.3.1
@@ -1168,7 +1161,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install kind
-        uses: helm/kind-action@v1
+        uses: helm/kind-action@v1.12.0
         with:
           version: v0.20.0
           install_only: true
@@ -1183,8 +1176,7 @@ jobs:
 
       - name: Create kind cluster
         run: |
-          sudo pip3 install j2cli
-          sudo pip3 install "j2cli[yaml]"
+          pipx install jinjanator
           sudo PATH=~/.local/bin:$PATH make kind-init
           sudo cp -r /root/.kube/ ~/.kube/
           sudo chown -R $(id -un). ~/.kube/
@@ -1200,7 +1192,7 @@ jobs:
   no-np-test:
     name: Disable Network Policy Test
     needs: build-kube-ovn
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 30
     steps:
       - uses: jlumbroso/free-disk-space@v1.3.1
@@ -1216,7 +1208,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install kind
-        uses: helm/kind-action@v1
+        uses: helm/kind-action@v1.12.0
         with:
           version: v0.20.0
           install_only: true
@@ -1231,8 +1223,7 @@ jobs:
 
       - name: Create kind cluster
         run: |
-          sudo pip3 install j2cli
-          sudo pip3 install "j2cli[yaml]"
+          pipx install jinjanator
           sudo PATH=~/.local/bin:$PATH make kind-init
           sudo cp -r /root/.kube/ ~/.kube/
           sudo chown -R $(id -un). ~/.kube/
@@ -1251,7 +1242,7 @@ jobs:
       - build-kube-ovn
       - build-vpc-nat-gateway
       - build-e2e-binaries
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 30
     steps:
       - uses: jlumbroso/free-disk-space@v1.3.1
@@ -1306,7 +1297,7 @@ jobs:
           restore-keys: ${{ runner.os }}-e2e-go-${{ env.GO_VERSION }}-x86-
 
       - name: Install kind
-        uses: helm/kind-action@v1
+        uses: helm/kind-action@v1.12.0
         with:
           version: v0.20.0
           install_only: true
@@ -1332,8 +1323,7 @@ jobs:
 
       - name: Create kind cluster
         run: |
-          sudo pip3 install j2cli
-          sudo pip3 install "j2cli[yaml]"
+          pipx install jinjanator
           sudo PATH=~/.local/bin:$PATH make kind-init
           sudo cp -r /root/.kube/ ~/.kube/
           sudo chown -R $(id -un). ~/.kube/
@@ -1350,7 +1340,7 @@ jobs:
   installation-compatibility-test:
     name: Installation Compatibility Test
     needs: build-kube-ovn
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 30
     steps:
       - uses: jlumbroso/free-disk-space@v1.3.1
@@ -1366,7 +1356,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install kind
-        uses: helm/kind-action@v1
+        uses: helm/kind-action@v1.12.0
         with:
           version: v0.20.0
           install_only: true
@@ -1381,8 +1371,7 @@ jobs:
 
       - name: Create kind cluster
         run: |
-          sudo pip3 install j2cli
-          sudo pip3 install "j2cli[yaml]"
+          pipx install jinjanator
           sudo PATH=~/.local/bin:$PATH k8s_version=v1.23.17 make kind-init
           sudo cp -r /root/.kube/ ~/.kube/
           sudo chown -R $(id -un). ~/.kube/
@@ -1398,7 +1387,7 @@ jobs:
     needs:
       - build-kube-ovn
       - build-e2e-binaries
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 45
     steps:
       - uses: jlumbroso/free-disk-space@v1.3.1
@@ -1412,7 +1401,7 @@ jobs:
           swap-storage: false
 
       - uses: actions/checkout@v4
-      - uses: azure/setup-helm@v4
+      - uses: azure/setup-helm@v4.3.0
         with:
           version: '${{ env.HELM_VERSION }}'
 
@@ -1461,7 +1450,7 @@ jobs:
           restore-keys: ${{ runner.os }}-e2e-go-${{ env.GO_VERSION }}-x86-
 
       - name: Install kind
-        uses: helm/kind-action@v1
+        uses: helm/kind-action@v1.12.0
         with:
           version: v0.20.0
           install_only: true
@@ -1480,8 +1469,7 @@ jobs:
 
       - name: Create kind cluster
         run: |
-          sudo pip3 install j2cli
-          sudo pip3 install "j2cli[yaml]"
+          pipx install jinjanator
           sudo PATH=~/.local/bin:$PATH make kind-init
           sudo cp -r /root/.kube/ ~/.kube/
           sudo chown -R $(id -un). ~/.kube/
@@ -1504,7 +1492,7 @@ jobs:
     needs:
       - build-kube-ovn
       - build-e2e-binaries
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 30
     strategy:
       fail-fast: false
@@ -1572,7 +1560,7 @@ jobs:
           restore-keys: ${{ runner.os }}-e2e-go-${{ env.GO_VERSION }}-x86-
 
       - name: Install kind
-        uses: helm/kind-action@v1
+        uses: helm/kind-action@v1.12.0
         with:
           version: v0.20.0
           install_only: true
@@ -1591,8 +1579,7 @@ jobs:
 
       - name: Create kind cluster
         run: |
-          sudo pip3 install j2cli
-          sudo pip3 install "j2cli[yaml]"
+          pipx install jinjanator
           sudo PATH=~/.local/bin:$PATH make kind-init-ha-${{ matrix.ip-family }}
           sudo cp -r /root/.kube/ ~/.kube/
           sudo chown -R $(id -un). ~/.kube/
@@ -1631,7 +1618,7 @@ jobs:
       - cilium-chaining-e2e
       - kube-ovn-ha-e2e
     if: always() && !contains(needs.*.result, 'failure') && !contains(needs.*.result, 'cancelled')
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
 
diff --git a/.github/workflows/changelog.yaml b/.github/workflows/changelog.yaml
index c5f8a634574..8a089b355b6 100644
--- a/.github/workflows/changelog.yaml
+++ b/.github/workflows/changelog.yaml
@@ -17,7 +17,7 @@ jobs:
       - run: git fetch --prune --prune-tags
       - run: git tag -l 'v*'
       - run: ./hack/changelog.sh > CHANGELOG.md
-      - uses: peter-evans/create-pull-request@v6
+      - uses: peter-evans/create-pull-request@v7
         with:
           title: 'docs: updated CHANGELOG.md'
           commit-message: 'docs: updated CHANGELOG.md'
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 07d1950d1a0..d5f948d41b4 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -24,7 +24,7 @@ env:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     strategy:
       fail-fast: false
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 2f13958604d..fe05b120251 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -18,7 +18,7 @@ env:
 jobs:
   golangci:
     name: lint
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index fd2d7c3d404..7dab65923dc 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -11,7 +11,7 @@ concurrency:
 jobs:
   build:
     name: Publish Images
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4