From ba33a25d6fdae70490da65a1740ebdea8206d191 Mon Sep 17 00:00:00 2001
From: Justin <justinwlin@gmail.com>
Date: Thu, 29 Oct 2026 14:51:22 -0400
Subject: [PATCH 1/3] ci: run workflows on Blacksmith runners

---
 .github/workflows/ci.yml         | 2 +-
 .github/workflows/spec-drift.yml | 2 +-
 .github/workflows/version.yml    | 6 +++---
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e1363ab..7bc0da9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,7 +11,7 @@ concurrency:
   cancel-in-progress: true
 jobs:
   verify:
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
     strategy:
       fail-fast: false
       matrix:
diff --git a/.github/workflows/spec-drift.yml b/.github/workflows/spec-drift.yml
index 87037c1..ff678c4 100644
--- a/.github/workflows/spec-drift.yml
+++ b/.github/workflows/spec-drift.yml
@@ -12,7 +12,7 @@ jobs:
   update:
     # Scheduled runs use the default branch. Reject manual runs from other refs.
     if: github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
     timeout-minutes: 20
     permissions:
       contents: write
diff --git a/.github/workflows/version.yml b/.github/workflows/version.yml
index f411d0a..e99bf80 100644
--- a/.github/workflows/version.yml
+++ b/.github/workflows/version.yml
@@ -16,7 +16,7 @@ concurrency:
 jobs:
   version:
     if: github.ref == 'refs/heads/main'
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
     timeout-minutes: 15
     outputs:
       has_changesets: ${{ steps.changesets.outputs.hasChangesets }}
@@ -59,7 +59,7 @@ jobs:
   # other PRs are still pending.
   eligibility:
     needs: version
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
     outputs:
       eligible: ${{ steps.plan.outputs.eligible }}
     permissions:
@@ -83,7 +83,7 @@ jobs:
   publish:
     needs: [eligibility, validate]
     if: needs.eligibility.outputs.eligible == 'true'
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
     timeout-minutes: 20
     environment: npm
     permissions:

From cc779ee58536a3a53182517bff83969ac0961b7f Mon Sep 17 00:00:00 2001
From: Justin <justinwlin@gmail.com>
Date: Fri, 30 Oct 2026 11:22:21 -0400
Subject: [PATCH 2/3] ci: run publish jobs on the static-IP GitHub-hosted
 runner

---
 .github/workflows/runner-probe.yml | 8 ++++++++
 .github/workflows/version.yml      | 2 +-
 2 files changed, 9 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/runner-probe.yml

diff --git a/.github/workflows/runner-probe.yml b/.github/workflows/runner-probe.yml
new file mode 100644
index 0000000..e0cc95d
--- /dev/null
+++ b/.github/workflows/runner-probe.yml
@@ -0,0 +1,8 @@
+name: runner-probe
+on: pull_request
+jobs:
+  probe:
+    runs-on: runpod-4vCPU-ubuntu-2404
+    timeout-minutes: 5
+    steps:
+      - run: echo "static-IP runner reachable from ${{ github.repository }}"
diff --git a/.github/workflows/version.yml b/.github/workflows/version.yml
index e99bf80..4ec04ca 100644
--- a/.github/workflows/version.yml
+++ b/.github/workflows/version.yml
@@ -83,7 +83,7 @@ jobs:
   publish:
     needs: [eligibility, validate]
     if: needs.eligibility.outputs.eligible == 'true'
-    runs-on: blacksmith-2vcpu-ubuntu-2404
+    runs-on: runpod-4vCPU-ubuntu-2404 # GitHub-hosted (trusted publishing needs that) with allow-listed static IPs
     timeout-minutes: 20
     environment: npm
     permissions:

From adde0ff9247ffb3e420f8bca88a89c53a71180cf Mon Sep 17 00:00:00 2001
From: Justin <justinwlin@gmail.com>
Date: Fri, 30 Oct 2026 11:23:19 -0400
Subject: [PATCH 3/3] ci: remove the runner probe

---
 .github/workflows/runner-probe.yml | 8 --------
 1 file changed, 8 deletions(-)
 delete mode 100644 .github/workflows/runner-probe.yml

diff --git a/.github/workflows/runner-probe.yml b/.github/workflows/runner-probe.yml
deleted file mode 100644
index e0cc95d..0000000
--- a/.github/workflows/runner-probe.yml
+++ /dev/null
@@ -1,8 +0,0 @@
-name: runner-probe
-on: pull_request
-jobs:
-  probe:
-    runs-on: runpod-4vCPU-ubuntu-2404
-    timeout-minutes: 5
-    steps:
-      - run: echo "static-IP runner reachable from ${{ github.repository }}"