[WomB0ComB0]

Reverts the self-hosted runner toggle on this public repo back to ubuntu-latest.

Public repositories get GitHub-hosted Actions for free and are excluded from the org's self-hosted runner group (which also disallows public repos), so the toggle was inert here and never routed to a self-hosted runner. Self-hosted is reserved for the private repos that were affected by the hosted-runner outage. Removing the unused toggle to keep public CI clearly hosted-only.

Merge on green.

Summary by CodeRabbit

• Chores
  • CI, release, licensing, and pull-request labeling workflows now run on standard Ubuntu-hosted runners in all configurations.
  • These workflows no longer switch to self-hosted runners when the self-hosted setting is enabled, keeping their execution environment consistent regardless of that setting.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 5f67b1f9-53d8-4a8f-ac4f-d1bbcaf9765e

📥 Commits

Reviewing files that changed from the base of the PR and between 011ed18 and 2cd3a30.

📒 Files selected for processing (6)

• .github/workflows/ci.yml
• .github/workflows/conventional-title-labeler.yml
• .github/workflows/dependency-licences.yml
• .github/workflows/label-sync.yml
• .github/workflows/labeler.yml
• .github/workflows/pr-size-labeler.yml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

Seven GitHub Actions jobs now run on ubuntu-latest unconditionally. They no longer select self-hosted runners based on USE_SELF_HOSTED.

Changes

Workflow runner standardization

Layer / File(s)	Summary
Set workflow jobs to ubuntu-latest .github/workflows/ci.yml, .github/workflows/conventional-title-labeler.yml, .github/workflows/dependency-licences.yml, .github/workflows/label-sync.yml, .github/workflows/labeler.yml, .github/workflows/pr-size-labeler.yml	The required and release jobs and five repository automation jobs now use ubuntu-latest instead of conditionally selecting self-hosted runners.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~4 minutes

Change: Bug fix

Merge Risk: ⚪ Minimal · up to 2cd3a

The workflows remain on hosted runners as intended for this public repository. No material merge risk is identified.

Architecture Summary

Architecture risk: 🔵 Low · up to 2cd3a

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

• observed — Modified behavior in .github/workflows/ci.yml: The required job now uses ubuntu-latest instead of selecting the self-hosted zima runner when vars.USE_SELF_HOSTED is 'true'.
• observed — Modified behavior in .github/workflows/ci.yml: The release job now uses ubuntu-latest instead of selecting the self-hosted zima runner when vars.USE_SELF_HOSTED is 'true'.
• observed — Modified behavior in .github/workflows/conventional-title-labeler.yml: The label job now uses ubuntu-latest unconditionally, replacing the conditional selection of the self-hosted zima runner when USE_SELF_HOSTED was true.
• observed — Modified behavior in .github/workflows/dependency-licences.yml: licence-check now always uses ubuntu-latest; the previous condition that selected the self-hosted, linux, x64, and zima runner labels when vars.USE_SELF_HOSTED was 'true' was removed.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the main change: reverting the self-hosted runner toggle and keeping this public repository hosted-only.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

PR Audit: Passed

I have audited the changes in this pull request.

Summary of changes:
The PR reverts the runs-on configuration in several GitHub Workflows from a conditional self-hosted runner logic to a static ubuntu-latest.

Audit Findings:

• Security: Reverting to GitHub-hosted runners (ubuntu-latest) for a public repository is a recommended security practice. It prevents untrusted code from pull requests from potentially compromising self-hosted infrastructure.
• Logic & Correctness: The changes are consistent across all modified files and correctly implement the "hosted-only" policy mentioned in the commit messages.
• Performance: While self-hosted runners might have provided specific performance benefits, ubuntu-latest is standard and sufficient for these workflows.

The audit has passed with no issues identified.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

Generated by ai-auditor for issue #85 · ◷