From 1ec56ae2dedd9311ee6e1685d8478a6277ed1cc8 Mon Sep 17 00:00:00 2001
From: Svaag <7023216+Svaag@users.noreply.github.com>
Date: Thu, 15 Oct 2026 02:55:18 +0200
Subject: [PATCH 1/2] ci: run PR checks on GitHub-hosted ubuntu-latest

Move ci.yml pr-agent.yml  off the single self-hosted hyrule-public-pr runner. These jobs
need no infra network access and no secrets beyond GITHUB_TOKEN (pr-agent's
OPENROUTER key stays limited to same-repo PRs and trusted slash commands
under pull_request). Post-merge promotion/deploy jobs stay self-hosted.
---
 .github/workflows/ci.yml       | 20 ++++++++++++++++----
 .github/workflows/pr-agent.yml |  2 +-
 2 files changed, 17 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 90a55b8..b1d1c90 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,27 +21,36 @@ permissions:
 
 jobs:
   ruff:
-    runs-on: [self-hosted, linux, x64, hyrule-public-pr]
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
       - name: Install uv
         run: curl -LsSf https://astral.sh/uv/install.sh | sh
       - name: ruff
         run: ~/.local/bin/uvx ruff check src tests
 
   mypy:
-    runs-on: [self-hosted, linux, x64, hyrule-public-pr]
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
       - name: Install uv
         run: curl -LsSf https://astral.sh/uv/install.sh | sh
       - name: mypy --strict
         run: ~/.local/bin/uv run --group dev mypy --strict src
 
   pytest:
-    runs-on: [self-hosted, linux, x64, hyrule-public-pr]
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
       - name: Install uv
         run: curl -LsSf https://astral.sh/uv/install.sh | sh
       - name: pytest
@@ -55,9 +64,12 @@ jobs:
         run: TMPDIR=/tmp ~/.local/bin/uv run --group dev python -m pytest -q
 
   evals:
-    runs-on: [self-hosted, linux, x64, hyrule-public-pr]
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
       - name: Install uv
         run: curl -LsSf https://astral.sh/uv/install.sh | sh
       - name: private evals
diff --git a/.github/workflows/pr-agent.yml b/.github/workflows/pr-agent.yml
index c317051..84f098e 100644
--- a/.github/workflows/pr-agent.yml
+++ b/.github/workflows/pr-agent.yml
@@ -42,7 +42,7 @@ jobs:
        github.event.issue.pull_request &&
        startsWith(github.event.comment.body, '/') &&
        contains(fromJSON('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association))
-    runs-on: [self-hosted, linux, x64, hyrule-public-pr]
+    runs-on: ubuntu-latest
     timeout-minutes: 12
     steps:
       - name: PR-Agent

From 978ce0ec20934f7b95c44f79fbc7ff29cbfcbcb5 Mon Sep 17 00:00:00 2001
From: Svaag <7023216+Svaag@users.noreply.github.com>
Date: Thu, 15 Oct 2026 03:04:11 +0200
Subject: [PATCH 2/2] ci: pin ruff <0.16 (hosted runner has no cached older uvx
 ruff)

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b1d1c90..0844d7a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,7 +30,7 @@ jobs:
       - name: Install uv
         run: curl -LsSf https://astral.sh/uv/install.sh | sh
       - name: ruff
-        run: ~/.local/bin/uvx ruff check src tests
+        run: ~/.local/bin/uvx "ruff>=0.15,<0.16" check src tests
 
   mypy:
     runs-on: ubuntu-latest