ci: run workflows on Depot runners with tiered sizing

Author: ThomasK33

.github/actionlint.yaml

@@ -0,0 +1,11 @@
+# actionlint configuration for this repository.
+#
+# We use Depot-managed GitHub Actions runners (depot-*) instead of GitHub-hosted
+# runners. actionlint does not know custom runner labels by default, so we must
+# explicitly allow them here.
+#
+# Docs: https://github.com/rhysd/actionlint/blob/main/docs/config.md
+self-hosted-runner:
+  labels:
+    - depot-ubuntu-24.04
+    - depot-ubuntu-24.04-8

.github/workflows/ci.yaml

@@ -14,7 +14,7 @@ permissions:
 jobs:
   changes:
     name: Detect changed paths
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04
     permissions:
       contents: read
       pull-requests: read
@@ -54,6 +54,8 @@ jobs:
               - '.golangci.yaml'
             workflows:
               - '.github/workflows/**'
+              - '.github/actionlint.yaml'
+              - '.github/actionlint.yml'
             publish:
               - '**/*.go'
               - 'go.mod'
@@ -65,7 +67,8 @@ jobs:
   lint:
     needs: changes
     if: github.event_name == 'merge_group' || needs.changes.outputs.go == 'true'
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-8
+    timeout-minutes: 20
     steps:
       - name: Checkout
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
@@ -102,7 +105,8 @@ jobs:
   test:
     needs: changes
     if: github.event_name == 'merge_group' || needs.changes.outputs.go == 'true'
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-8
+    timeout-minutes: 30
     steps:
       - name: Checkout
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
@@ -143,7 +147,8 @@ jobs:
     name: E2E Smoke (Kind)
     needs: [changes, test]
     if: needs.changes.outputs.go == 'true'
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-8
+    timeout-minutes: 45
     steps:
       - name: Checkout
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
@@ -203,7 +208,7 @@ jobs:
     name: Lint GitHub Actions
     needs: changes
     if: github.event_name == 'merge_group' || needs.changes.outputs.workflows == 'true'
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04
     permissions:
       contents: read
     steps:
@@ -231,7 +236,7 @@ jobs:
   codex-comments:
     name: Codex Comments
     if: github.event_name == 'pull_request'
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04
     permissions:
       contents: read
       pull-requests: read
@@ -259,7 +264,8 @@ jobs:
       (needs.lint.result == 'success' || needs.lint.result == 'skipped') &&
       (needs.lint-actions.result == 'success' || needs.lint-actions.result == 'skipped') &&
       (needs.e2e-kind.result == 'success' || needs.e2e-kind.result == 'skipped')
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-8
+    timeout-minutes: 30
     permissions:
       contents: read
       packages: write

.github/workflows/release.yaml

@@ -10,7 +10,8 @@ permissions:
 
 jobs:
   goreleaser:
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-8
+    timeout-minutes: 60
     steps:
       - name: Checkout
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1