ci: use Depot runners for workflows

.github/workflows/ci.yaml

@@ -15,15 +15,15 @@ concurrency:
 jobs:
   sdk-generate:
     name: Generate SDKs
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     steps:
       - uses: ory/ci/sdk/generate@master
         with:
           token: ${{ secrets.ORY_BOT_PAT }}
 
   test:
     name: Run tests and lints
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     needs:
       - sdk-generate
     services:
@@ -109,7 +109,7 @@ jobs:
 
   test-e2e:
     name: Run end-to-end tests
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     needs:
       - sdk-generate
     services:
@@ -223,7 +223,7 @@ jobs:
 
   test-e2e-playwright:
     name: Run Playwright end-to-end tests
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     needs:
       - sdk-generate
     services:
@@ -342,7 +342,7 @@ jobs:
             test/e2e/playwright-report/
 
   docs-cli:
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     name: Build CLI docs
     needs:
       - test
@@ -355,7 +355,7 @@ jobs:
 
   changelog:
     name: Generate changelog
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     if: ${{ github.ref_type == 'tag' || github.ref_name == 'master' }}
     needs:
       - test
@@ -367,7 +367,7 @@ jobs:
 
   sdk-release:
     name: Release SDKs
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     if: ${{ github.ref_type == 'tag' }}
     needs:
       - test
@@ -382,7 +382,7 @@ jobs:
 
   release:
     name: Generate release
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     if: ${{ github.ref_type == 'tag' }}
     needs:
       - test
@@ -399,7 +399,7 @@ jobs:
 
   render-version-schema:
     name: Render version schema
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     if: ${{ github.ref_type == 'tag' }}
     needs:
       - release
@@ -411,7 +411,7 @@ jobs:
 
   newsletter-draft:
     name: Draft newsletter
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     if: ${{ github.ref_type == 'tag' }}
     needs:
       - release
@@ -426,7 +426,7 @@ jobs:
 
   slack-approval-notification:
     name: Pending approval Slack notification
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     if: ${{ github.ref_type == 'tag' }}
     needs:
       - newsletter-draft
@@ -437,7 +437,7 @@ jobs:
 
   newsletter-send:
     name: Send newsletter
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     needs:
       - newsletter-draft
     if: ${{ github.ref_type == 'tag' }}

.github/workflows/closed_references.yml

@@ -16,7 +16,7 @@ on:
 jobs:
   find_closed_references:
     if: github.repository_owner == 'ory'
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     name: Find closed references
     steps:
       - uses: actions/checkout@v2

.github/workflows/codeql-analysis.yml

@@ -23,7 +23,7 @@ on:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
 
     strategy:
       fail-fast: false

.github/workflows/conventional_commits.yml

@@ -22,7 +22,7 @@ on:
 jobs:
   main:
     name: Validate PR title
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     steps:
       - uses: actions/checkout@v3
       - id: config

.github/workflows/cve-scan.yaml

@@ -19,7 +19,7 @@ permissions:
 
 jobs:
   scanners:
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/format.yml

@@ -6,7 +6,7 @@ on:
 
 jobs:
   format:
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v3

.github/workflows/labels.yml

@@ -13,7 +13,7 @@ jobs:
   milestone:
     if: github.repository_owner == 'ory'
     name: Synchronize Issue Labels
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v2

.github/workflows/licenses.yml

@@ -14,7 +14,7 @@ on:
 jobs:
   licenses:
     name: License compliance
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     steps:
       - name: Install script
         uses: ory/ci/licenses/setup@master

.github/workflows/milestone.yml

@@ -12,7 +12,7 @@ jobs:
   milestone:
     if: github.repository_owner == 'ory'
     name: Generate and Publish Milestone Document
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/pm.yml

@@ -13,7 +13,7 @@ jobs:
   automate:
     if: github.event.pull_request.head.repo.fork == false
     name: Add issue to project
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     timeout-minutes: 5
     steps:
       - uses: ory-corp/planning-automation-action@v0.1

.github/workflows/stale.yml

@@ -10,7 +10,7 @@ on:
 jobs:
   stale:
     if: github.repository_owner == 'ory'
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-latest
     steps:
       - uses: actions/stale@v4
         with: