SHA-2 code signing became required to use WindowsUpdate on Aug 3, 2020. While SHA-2 support can be added with KB4474419 and KB4493730, the bigger problem is that all older updates signed only with SHA-1 have been removed from Microsoft's update servers so you'd have to download them from Windows Catalog or a mirror, and install them manually.
Windows 7 ran way better than early builds of Vista on the same hardware, and is little different than Vista SP2. If your hardware supports it, 32-bit Windows 10 isn't all that much slower either and is supported until 2025.
If you want to save installed software you have no install media for, there is no direct upgrade from Vista to 10 so you'd have to upgrade through Windows 7 in-between (you can skip Windows 8). I'll suggest cloning the Vista drive before upgrading the copy in case something goes wrong or it turns out some of the software won't run in Windows 10.