.github/workflows: Migrate workflows to Blacksmith runners

.github/workflows/agent_build_publish.yaml

@@ -9,7 +9,7 @@ permissions:
 jobs:
   build:
     name: Build Agent
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v4
       - name: Get Version
@@ -22,16 +22,16 @@ jobs:
         run: echo "TAGS=ghcr.io/unkeyed/agent:${{env.VERSION}},ghcr.io/unkeyed/agent:latest" >> $GITHUB_ENV
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+      - name: Setup Blacksmith Builder
+        uses: useblacksmith/setup-docker-builder@v1
       - name: Login to image repository
         uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GHCR_TOKEN }}
       - name: Build and push
-        uses: docker/build-push-action@v6
+        uses: useblacksmith/build-push-action@v2
         with:
           context: apps/agent
           platforms: linux/amd64

.github/workflows/apply-issue-labels-to-pr.yml

@@ -6,7 +6,7 @@ on:
 jobs:
   label_on_pr:
     if: github.event.pull_request.draft == false
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     permissions:
       contents: none
       issues: read

.github/workflows/autofix.ci.yaml

@@ -8,7 +8,7 @@ permissions:
 jobs:
   autofix:
     if: github.event.pull_request.draft == false || github.event_name != 'pull_request'
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v4
       - name: Setup pnpm
@@ -37,7 +37,7 @@ jobs:
   lint_docs:
     name: Docs
     if: github.event.pull_request.draft == false || github.event_name != 'pull_request'
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v4
       - name: Lint main docs

.github/workflows/build.yaml

@@ -6,7 +6,7 @@ permissions:
 jobs:
   build:
     name: Build
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v4
       - name: Run containers

.github/workflows/check_quotas.yml

@@ -10,7 +10,7 @@ jobs:
   quota-check:
     environment: operations
     name: Check quota usage
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - name: Checkout code
         uses: actions/checkout@v4

.github/workflows/deploy.yaml

@@ -62,7 +62,7 @@ jobs:
     secrets:
       CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
   mintlify_deployment:
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     needs:
       - api_production_deployment
     name: Deploy docs

.github/workflows/deploy_trigger.yaml

@@ -3,7 +3,7 @@ on:
   workflow_call:
 jobs:
   deploy_trigger:
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v4
       - name: Setup Node (minimal for pnpx)

.github/workflows/ghcr_retention_policy.yaml

@@ -8,7 +8,7 @@ on:
 jobs:
   clean:
     environment: operations
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     name: Delete old test images
     steps:
       - uses: snok/[email protected]

.github/workflows/job_build_agent_image.yaml

@@ -10,7 +10,7 @@ permissions:
 jobs:
   build:
     name: Build Agent
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v4
       - name: Get Version
@@ -19,16 +19,16 @@ jobs:
         run: echo "TAGS=ghcr.io/${{ github.repository }}:${{env.VERSION}},ghcr.io/${{ github.repository }}:latest" >> $GITHUB_ENV
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+      - name: Setup Blacksmith Builder
+        uses: useblacksmith/setup-docker-builder@v1
       - name: Login to image repository
         uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GHCR_TOKEN }}
       - name: Build and push
-        uses: docker/build-push-action@v6
+        uses: useblacksmith/build-push-action@v2
         with:
           context: apps/agent
           platforms: linux/amd64

.github/workflows/job_deploy_api_canary.yaml

@@ -9,7 +9,7 @@ on:
 jobs:
   deploy:
     environment: Canary
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v4
       - name: Setup Node

.github/workflows/job_deploy_api_enterprise.yaml

@@ -9,7 +9,7 @@ on:
         description: "Cloudflare API Token"
 jobs:
   deploy:
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     environment: Enterprise
     strategy:
       fail-fast: true

.github/workflows/job_deploy_api_production.yaml

@@ -10,7 +10,7 @@ jobs:
       contents: read
       deployments: write
     environment: Production
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v4
       - name: Setup Node

.github/workflows/job_deploy_api_staging.yaml

@@ -9,7 +9,7 @@ on:
 jobs:
   deploy:
     environment: Preview
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v4
       - name: Setup Node

.github/workflows/job_deploy_logdrain_production.yaml

@@ -10,7 +10,7 @@ jobs:
       contents: read
       deployments: write
     environment: Production
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v4
       - name: Setup Node

.github/workflows/job_deploy_workflows.yaml

@@ -9,7 +9,7 @@ on:
 jobs:
   deploy:
     environment: Production
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v4
       - name: Setup Node

.github/workflows/job_detect_changes.yaml

@@ -40,7 +40,7 @@ permissions:
 jobs:
   build:
     name: Detect Changes
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     outputs:
       api: ${{ steps.changes.outputs.api }}
       dashboard: ${{ steps.changes.outputs.dashboard }}

.github/workflows/job_test_api_canary.yaml

@@ -21,7 +21,7 @@ jobs:
     environment: Canary
     name: API Test Canary
     timeout-minutes: 60
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     strategy:
       fail-fast: false
       matrix:

.github/workflows/job_test_api_staging.yaml

@@ -21,7 +21,7 @@ jobs:
     name: API Test Staging
     environment: Preview
     timeout-minutes: 60
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     strategy:
       fail-fast: false
       matrix:

.github/workflows/job_test_unit.yaml

@@ -6,11 +6,11 @@ permissions:
 jobs:
   test:
     name: Test
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v4
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+      - name: Setup Blacksmith Builder
+        uses: useblacksmith/setup-docker-builder@v1
       - name: Setup Docker permissions
         run: |
           sudo chmod 666 /var/run/docker.sock

.github/workflows/runbook-freshness-check.yaml

@@ -21,7 +21,7 @@ on:
   workflow_dispatch: # Allow manual trigger
 jobs:
   check-runbook-freshness:
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     # Security: Set timeout to prevent runaway workflows
     timeout-minutes: 10
     # Security: Restrict environment access

.github/workflows/semantic-pull-requests.yaml

@@ -12,7 +12,7 @@ jobs:
   validate-pr:
     name: PR title
     if: github.event.pull_request.draft == false
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: amannn/action-semantic-pull-request@v5
         id: lint_pr_title