ci: use GitHub-hosted runners in fork

.github/workflows/ci.yml

@@ -118,7 +118,7 @@ jobs:
 
   migration-order:
     name: Migration order
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     needs: ci_changes
     if: needs.ci_changes.outputs.migration_order == 'true'
     steps:
@@ -132,7 +132,7 @@ jobs:
 
   harness-server-checks:
     name: Harness server fmt, clippy, and tests
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     needs: ci_changes
     if: needs.ci_changes.outputs.harness_server_checks == 'true'
     steps:
@@ -163,7 +163,7 @@ jobs:
 
   rust-api:
     name: Rust API fmt, clippy, and tests
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     needs: ci_changes
     if: needs.ci_changes.outputs.rust_api == 'true'
     steps:
@@ -365,7 +365,7 @@ jobs:
 
   slackbotv2-tests:
     name: Slackbot v2 tests
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     needs: ci_changes
     if: needs.ci_changes.outputs.slackbotv2_tests == 'true'
     steps:
@@ -423,7 +423,7 @@ jobs:
 
   discordbot-checks:
     name: Discordbot typecheck and tests
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     needs: ci_changes
     if: needs.ci_changes.outputs.discordbot_checks == 'true'
     steps:
@@ -457,7 +457,7 @@ jobs:
 
   githubbot-checks:
     name: Githubbot typecheck and tests
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     needs: ci_changes
     if: needs.ci_changes.outputs.githubbot_checks == 'true'
     steps:
@@ -491,7 +491,7 @@ jobs:
 
   teamsbot-checks:
     name: Teamsbot typecheck and tests
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     needs: ci_changes
     if: needs.ci_changes.outputs.teamsbot_checks == 'true'
     steps:

.github/workflows/console-ci.yml

@@ -46,119 +46,119 @@
           fi
 
   scan_ruby:
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     needs: console_changes
     if: needs.console_changes.outputs.relevant == 'true'
 
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up Ruby
         uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
         with:
           working-directory: services/console
           bundler-cache: true
 
       - name: Scan for common Rails security vulnerabilities using static analysis
         run: bin/brakeman --no-pager
 
   scan_js:
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     needs: console_changes
     if: needs.console_changes.outputs.relevant == 'true'
 
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up Ruby
         uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
         with:
           working-directory: services/console
           bundler-cache: true
 
       - name: Scan for security vulnerabilities in JavaScript dependencies
         run: bin/importmap audit
 
   lint:
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     needs: console_changes
     if: needs.console_changes.outputs.relevant == 'true'
     env:
       RUBOCOP_CACHE_ROOT: ${{ github.workspace }}/services/console/tmp/rubocop
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up Ruby
         uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
         with:
           working-directory: services/console
           bundler-cache: true
 
       - name: Prepare RuboCop cache
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         env:
           DEPENDENCIES_HASH: ${{ hashFiles('services/console/.ruby-version', 'services/console/**/.rubocop.yml', 'services/console/**/.rubocop_todo.yml', 'services/console/Gemfile.lock') }}
         with:
           path: ${{ env.RUBOCOP_CACHE_ROOT }}
           key: rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-${{ github.ref_name == github.event.repository.default_branch && github.run_id || 'default' }}
           restore-keys: |
             rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-
 
       - name: Lint code for consistent style
         run: bin/rubocop -f github
 
   test:
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     needs: console_changes
     if: needs.console_changes.outputs.relevant == 'true'
 
     services:
       postgres:
         image: paradedb/paradedb:0.23.0-pg16
         env:
           POSTGRES_USER: postgres
           POSTGRES_PASSWORD: postgres
         ports:
           - 5432:5432
         options: --health-cmd="pg_isready -U postgres" --health-interval=10s --health-timeout=5s --health-retries=5
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Install packages
         run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libvips libpq-dev
 
       - name: Set up Ruby
         uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
         with:
           working-directory: services/console
           bundler-cache: true
 
       - name: Verify migrations match the checked-in schema
         env:
           RAILS_ENV: test
           IRON_CONTROL_DB_HOST: localhost
           IRON_CONTROL_DB_PORT: 5432
           IRON_CONTROL_DB_USERNAME: postgres
           IRON_CONTROL_DB_PASSWORD: postgres
         run: |
           bin/rails db:create db:migrate
           git diff --exit-code -- db/schema.rb
 
       - name: Run tests
         env:
           RAILS_ENV: test
           IRON_CONTROL_DB_HOST: localhost
           IRON_CONTROL_DB_PORT: 5432
           IRON_CONTROL_DB_USERNAME: postgres
           IRON_CONTROL_DB_PASSWORD: postgres
           # RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }}
         run: bin/rails db:test:prepare test
 
   console-ci-success:
     name: Console CI success
     runs-on: ubuntu-latest
     if: always()

.github/workflows/console-gem-audit.yml

@@ -13,7 +13,7 @@ defaults:
 
 jobs:
   scan_gems:
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
 
     steps:
       - name: Checkout code

.github/workflows/docs.yml

@@ -26,7 +26,7 @@ permissions:
 jobs:
   build-and-deploy:
     name: Build and deploy docs
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     timeout-minutes: 20
     strategy:
       matrix:

.github/workflows/pr-audit.yml

@@ -8,7 +8,7 @@ permissions: {}
 
 jobs:
   publish:
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     if: github.event.label.name == 'cyclops'
     steps:
       - name: Publish event

.github/workflows/release-chart.yml

@@ -20,7 +20,7 @@ jobs:
   release:
     permissions:
       contents: write
-    runs-on: depot-ubuntu-24.04-16
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1