From 06ab6e7f8b50d60bcc32a620fc5512ec67ae16fe Mon Sep 17 00:00:00 2001
From: Mike Odnis <mike@mikeodnis.dev>
Date: Tue, 29 Sep 2026 14:35:50 -0400
Subject: [PATCH 1/6] ci: revert ci.yml to ubuntu-latest (public repo,
 hosted-only)

---
 .github/workflows/ci.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7b42924..1cdd5ce 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -36,7 +36,7 @@ jobs:
 
   required:
     name: required
-    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     needs: [rust]
     if: always()
     steps:
@@ -62,7 +62,7 @@ jobs:
     name: GitHub Release
     needs: [required]
     if: startsWith(github.ref, 'refs/tags/v')
-    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     permissions:
       contents: write # create the release and upload its assets
       id-token: write # sign the provenance attestation through Sigstore

From 4df0e02e03992d580aadca6f90cd25dcd2a4318e Mon Sep 17 00:00:00 2001
From: Mike Odnis <mike@mikeodnis.dev>
Date: Tue, 29 Sep 2026 14:35:52 -0400
Subject: [PATCH 2/6] ci: revert conventional-title-labeler.yml to
 ubuntu-latest (public repo, hosted-only)

---
 .github/workflows/conventional-title-labeler.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/conventional-title-labeler.yml b/.github/workflows/conventional-title-labeler.yml
index 7299774..1daf978 100644
--- a/.github/workflows/conventional-title-labeler.yml
+++ b/.github/workflows/conventional-title-labeler.yml
@@ -21,7 +21,7 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     steps:
       - name: Map conventional title prefix to a C-* label
         # TITLE is read from env (never interpolated into the script) to avoid

From f0e6d616374de4b7734e7b1a68627f2bf26f27e6 Mon Sep 17 00:00:00 2001
From: Mike Odnis <mike@mikeodnis.dev>
Date: Tue, 29 Sep 2026 14:35:53 -0400
Subject: [PATCH 3/6] ci: revert dependency-licences.yml to ubuntu-latest
 (public repo, hosted-only)

---
 .github/workflows/dependency-licences.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/dependency-licences.yml b/.github/workflows/dependency-licences.yml
index 2bd13e1..259c173 100644
--- a/.github/workflows/dependency-licences.yml
+++ b/.github/workflows/dependency-licences.yml
@@ -20,7 +20,7 @@ permissions: {}
 jobs:
   licence-check:
     name: licence check (warn-only)
-    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     permissions:
       contents: read
     steps:

From 8df5083f7b213926c21b3836f6eeb61f349644ea Mon Sep 17 00:00:00 2001
From: Mike Odnis <mike@mikeodnis.dev>
Date: Tue, 29 Sep 2026 14:35:55 -0400
Subject: [PATCH 4/6] ci: revert label-sync.yml to ubuntu-latest (public repo,
 hosted-only)

---
 .github/workflows/label-sync.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/label-sync.yml b/.github/workflows/label-sync.yml
index fc9eeb6..0fd95ea 100644
--- a/.github/workflows/label-sync.yml
+++ b/.github/workflows/label-sync.yml
@@ -28,7 +28,7 @@ permissions:
 jobs:
   sync:
     name: Sync Labels
-    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

From a45fbb11410bc3df314a5ce9354346d9593425a8 Mon Sep 17 00:00:00 2001
From: Mike Odnis <mike@mikeodnis.dev>
Date: Tue, 29 Sep 2026 14:35:57 -0400
Subject: [PATCH 5/6] ci: revert labeler.yml to ubuntu-latest (public repo,
 hosted-only)

---
 .github/workflows/labeler.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 6ffb237..4708263 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -26,7 +26,7 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7.0.0
         with:

From 2cd3a300202bf404f19fc18988de7b10243f69db Mon Sep 17 00:00:00 2001
From: Mike Odnis <mike@mikeodnis.dev>
Date: Tue, 29 Sep 2026 14:35:59 -0400
Subject: [PATCH 6/6] ci: revert pr-size-labeler.yml to ubuntu-latest (public
 repo, hosted-only)

---
 .github/workflows/pr-size-labeler.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/pr-size-labeler.yml b/.github/workflows/pr-size-labeler.yml
index 7dfc74f..f2766a2 100644
--- a/.github/workflows/pr-size-labeler.yml
+++ b/.github/workflows/pr-size-labeler.yml
@@ -26,7 +26,7 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     steps:
       - uses: pascalgn/size-label-action@56b489b027932ec0cf60438a1a5f1a19c8fc71ff # v0.5.7
         env: