chore: migrate gha workflows to depot.dev runners

.github/workflows/agent_build_publish.yaml

@@ -9,7 +9,7 @@ permissions:
 jobs:
   build:
     name: Build Agent
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Get Version

.github/workflows/apply-issue-labels-to-pr.yml

@@ -6,7 +6,7 @@ on:
 jobs:
   label_on_pr:
     if: github.event.pull_request.draft == false
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     permissions:
       contents: none
       issues: read

.github/workflows/autofix.ci.yaml

@@ -6,9 +6,12 @@ on:
 permissions:
   contents: read
 jobs:
+  detect_changes:
+    if: github.event.pull_request.draft == false || github.event_name != 'pull_request'
+    uses: ./.github/workflows/job_detect_changes.yaml
   autofix:
     if: github.event.pull_request.draft == false || github.event_name != 'pull_request'
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Setup pnpm
@@ -36,7 +39,8 @@ jobs:
       - uses: autofix-ci/action@635ffb0c9798bd160680f18fd73371e355b85f27 # v1.3.2
   lint_docs:
     name: Docs
-    if: github.event.pull_request.draft == false || github.event_name != 'pull_request'
+    if: ((github.event.pull_request.draft == false || github.event_name != 'pull_request') && needs.detect_changes.result == 'success' && needs.detect_changes.outputs.docs == 'true')
+    needs: [detect_changes]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4

.github/workflows/build.yaml

@@ -6,7 +6,7 @@ permissions:
 jobs:
   build:
     name: Build
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Run containers

.github/workflows/check_quotas.yml

@@ -10,7 +10,7 @@ jobs:
   quota-check:
     environment: operations
     name: Check quota usage
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
         name: Checkout code

.github/workflows/deploy.yaml

@@ -62,7 +62,7 @@ jobs:
     secrets:
       CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
   mintlify_deployment:
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     needs:
       - api_production_deployment
     name: Deploy docs

.github/workflows/deploy_trigger.yaml

@@ -3,7 +3,7 @@ on:
   workflow_call:
 jobs:
   deploy_trigger:
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Setup Node (minimal for pnpx)

.github/workflows/ghcr_retention_policy.yaml

@@ -8,7 +8,7 @@ on:
 jobs:
   clean:
     environment: operations
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     name: Delete old test images
     steps:
       - uses: snok/container-retention-policy@3b0972b2276b171b212f8c4efbca59ebba26eceb # v3.0.1

.github/workflows/job_build_agent_image.yaml

@@ -10,7 +10,7 @@ permissions:
 jobs:
   build:
     name: Build Agent
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Get Version

.github/workflows/job_deploy_api_canary.yaml

@@ -9,7 +9,7 @@ on:
 jobs:
   deploy:
     environment: Canary
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Setup Node

.github/workflows/job_deploy_api_enterprise.yaml

@@ -9,7 +9,7 @@ on:
         description: "Cloudflare API Token"
 jobs:
   deploy:
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     environment: Enterprise
     strategy:
       fail-fast: true

.github/workflows/job_deploy_api_production.yaml

@@ -10,7 +10,7 @@ jobs:
       contents: read
       deployments: write
     environment: Production
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Setup Node

.github/workflows/job_deploy_api_staging.yaml

@@ -9,7 +9,7 @@ on:
 jobs:
   deploy:
     environment: Preview
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Setup Node

.github/workflows/job_deploy_logdrain_production.yaml

@@ -10,7 +10,7 @@ jobs:
       contents: read
       deployments: write
     environment: Production
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Setup Node

.github/workflows/job_deploy_workflows.yaml

@@ -9,7 +9,7 @@ on:
 jobs:
   deploy:
     environment: Production
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Setup Node

.github/workflows/job_detect_changes.yaml

@@ -40,7 +40,7 @@ permissions:
 jobs:
   build:
     name: Detect Changes
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     outputs:
       api: ${{ steps.changes.outputs.api }}
       dashboard: ${{ steps.changes.outputs.dashboard }}

.github/workflows/job_test_api_canary.yaml

@@ -21,7 +21,7 @@ jobs:
     environment: Canary
     name: API Test Canary
     timeout-minutes: 60
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     strategy:
       fail-fast: false
       matrix:

.github/workflows/job_test_api_local.yaml

@@ -7,11 +7,11 @@ jobs:
   test:
     name: API Test Local
     timeout-minutes: 90
-    runs-on: blacksmith-8vcpu-ubuntu-2404
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Set up Docker Buildx
-        uses: useblacksmith/setup-docker-builder@1796035cb0632d35796ffec6b4b3bddafbc85c6e # v1
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
       - name: Create dashboard env file for Docker Compose
         run: |
           mkdir -p ./apps/dashboard

.github/workflows/job_test_api_staging.yaml

@@ -21,7 +21,7 @@ jobs:
     name: API Test Staging
     environment: Preview
     timeout-minutes: 60
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     strategy:
       fail-fast: false
       matrix:

.github/workflows/job_test_go_api_local.yaml

@@ -6,15 +6,15 @@ permissions:
 jobs:
   tests:
     name: Test
-    runs-on: blacksmith-16vcpu-ubuntu-2404
+    runs-on: depot-ubuntu-24.04-8
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Create dashboard env file for Docker Compose
         run: |
           mkdir -p ./apps/dashboard
           touch ./apps/dashboard/.env
       - name: Set up Docker Buildx
-        uses: useblacksmith/setup-docker-builder@1796035cb0632d35796ffec6b4b3bddafbc85c6e # v1
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
       - name: Setup Go
         uses: ./.github/actions/setup-go
         with:

.github/workflows/job_test_unit.yaml

@@ -6,7 +6,7 @@ permissions:
 jobs:
   test:
     name: Test
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Set up Docker Buildx

.github/workflows/release.yaml

@@ -10,7 +10,7 @@ permissions:
 concurrency: release
 jobs:
   goreleaser:
-    runs-on: blacksmith-4vcpu-ubuntu-2404
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - name: Checkout
         uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4

.github/workflows/runbook-freshness-check.yaml

@@ -21,7 +21,7 @@ on:
   workflow_dispatch: # Allow manual trigger
 jobs:
   check-runbook-freshness:
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     # Security: Set timeout to prevent runaway workflows
     timeout-minutes: 10
     # Security: Restrict environment access

.github/workflows/semantic-pull-requests.yaml

@@ -12,7 +12,7 @@ jobs:
   validate-pr:
     name: PR title
     if: github.event.pull_request.draft == false
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     steps:
       - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1
         id: lint_pr_title

internal/checkly/.github/workflow.yml

@@ -21,7 +21,7 @@ jobs:
   test-e2e:
     if: github.event.deployment_status.state == 'success' # Only run when the deployment was successful.
     name: Test E2E on Checkly
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4