From 5dad1fb083655eed155e8520bebc6f03adee33eb Mon Sep 17 00:00:00 2001
From: Hendrik Brombeer <hendrikbrombeer@gmail.com>
Date: Mon, 4 May 2026 11:38:52 +0200
Subject: [PATCH] ci: switch back to self-hosted runners

The org runner-group's allows_public_repositories flag was off,
blocking the (public) grounds-cli repo from picking up jobs on
the org's self-hosted runners. Flag now flipped to true; revert
the temporary ubuntu-latest workaround so cli builds run on the
same iron as forge again.

Reverts the runtime-side of #30 (Workflows). Behavioural change:
test (linux) + release-please + goreleaser run on the org's
self-hosted runners, ubuntu-latest stays for macOS+Windows in
the test matrix.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .github/workflows/ci.yml      | 4 ++--
 .github/workflows/release.yml | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9232948..87a3b28 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,7 +10,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest, macos-14, windows-2022]
+        os: [self-hosted, macos-14, windows-2022]
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@v6
@@ -20,7 +20,7 @@ jobs:
       - run: go test ./... -race -cover
 
   build-snapshot:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     needs: test
     steps:
       - uses: actions/checkout@v6
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e8766b1..6652b0c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   release-please:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
       tag_name: ${{ steps.release.outputs.tag_name }}
@@ -25,7 +25,7 @@ jobs:
   goreleaser:
     needs: release-please
     if: ${{ needs.release-please.outputs.release_created }}
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - uses: actions/checkout@v6
         with: { fetch-depth: 0 }
@@ -59,7 +59,7 @@ jobs:
     # scopes. Add to repo secrets as SENTRY_AUTH_TOKEN.
     needs: [release-please, goreleaser]
     if: ${{ needs.release-please.outputs.release_created }}
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - uses: actions/checkout@v6
         with: { fetch-depth: 0 }