CI: use self-hosted runners

.github/workflows/auto-approve-cicd-release-pr.yml

@@ -8,7 +8,7 @@ permissions:
   pull-requests: write
 jobs:
   auto_approve:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     if: ${{ github.actor == 'temporal-cicd[bot]' }}
     steps:
       - name: Approve PR

.github/workflows/build-and-publish.yml

@@ -13,7 +13,7 @@ permissions:
 
 jobs:
   build-and-push-docker:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     timeout-minutes: 90
     # Only push for main, cloud, release branches (not feature)
     if: |
@@ -42,7 +42,7 @@ jobs:
 
   # For feature branches, just build (no push)
   build-docker-feature:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     if: startsWith(github.ref, 'refs/heads/feature/')
     steps:
       - name: Checkout code

.github/workflows/check-pr-placeholders.yml

@@ -9,7 +9,7 @@ permissions:
 
 jobs:
   validate-pr-description:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
 
     steps:
       - name: Validate PR description for placeholder lines or empty sections

.github/workflows/check-release-dependencies.yml

@@ -7,7 +7,7 @@ permissions:
 
 jobs:
   check-dependencies:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - name: Checkout code
         uses: actions/checkout@v6

.github/workflows/ci-success-report.yml

@@ -28,7 +28,7 @@ permissions:
 
 jobs:
   ci-success-report:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - name: Generate token
         id: generate_token

.github/workflows/docker-build-manual.yml

@@ -26,7 +26,7 @@ permissions:
 
 jobs:
   build-docker:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - name: Checkout code
         uses: actions/checkout@v6

.github/workflows/features-integration.yml

@@ -14,7 +14,7 @@ concurrency: # Auto-cancel existing runs in the PR when a new commit is pushed
 
 jobs:
   build-docker-image:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     permissions:
       actions: write
       contents: read
@@ -142,7 +142,7 @@ jobs:
       - feature-tests-java
       - feature-tests-dotnet
       - feature-tests-ruby
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     if: always()
     env:
       RESULTS: ${{ toJSON(needs.*.result) }}

.github/workflows/flaky-tests-report.yml

@@ -28,7 +28,7 @@ permissions:
 
 jobs:
   flaky-tests-report:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - name: Generate token
         id: generate_token

.github/workflows/linters.yml

@@ -5,7 +5,7 @@ permissions:
   contents: read
 jobs:
   lint-actions:
-    runs-on: ubuntu-24.04-arm
+    runs-on: self-hosted
     steps:
       - uses: actions/checkout@v6
         with:
@@ -25,7 +25,7 @@ jobs:
         shell: bash
 
   lint-protos:
-    runs-on: ubuntu-24.04-arm
+    runs-on: self-hosted
     steps:
       - uses: actions/checkout@v6
         with:
@@ -46,7 +46,7 @@ jobs:
           make lint-protos
 
   lint-api:
-    runs-on: ubuntu-24.04-arm
+    runs-on: self-hosted
     steps:
       - uses: actions/checkout@v6
         with:
@@ -67,7 +67,7 @@ jobs:
           make lint-api
 
   lint-workflows:
-    runs-on: ubuntu-24.04-arm
+    runs-on: self-hosted
     steps:
       - uses: actions/checkout@v6
         with:
@@ -87,7 +87,7 @@ jobs:
         run: make workflowcheck
 
   fmt:
-    runs-on: ubuntu-24.04-arm
+    runs-on: self-hosted
     steps:
       - uses: actions/checkout@v6
         with:
@@ -113,7 +113,7 @@ jobs:
           fi
 
   parallelize-tests:
-    runs-on: ubuntu-24.04-arm
+    runs-on: self-hosted
     steps:
       - uses: actions/checkout@v6
         with:
@@ -139,7 +139,7 @@ jobs:
           fi
 
   golangci:
-    runs-on: ubuntu-24.04-arm
+    runs-on: self-hosted
     steps:
       - uses: actions/checkout@v6
         with:
@@ -173,7 +173,7 @@ jobs:
       - lint-actions
       - golangci
       - parallelize-tests
-    runs-on: ubuntu-24.04-arm
+    runs-on: self-hosted
     if: always()
     env:
       RESULTS: ${{ toJSON(needs.*.result) }}

.github/workflows/optimize-test-sharding.yml

@@ -15,7 +15,7 @@ env:
 
 jobs:
   update-salts:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
 
     steps:
       - name: Generate GitHub token

.github/workflows/promote-docker-image.yml

@@ -23,7 +23,7 @@ on:
 
 jobs:
   validate-inputs:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     outputs:
       source-tag-safe: ${{ steps.validate.outputs.source-tag }}
       target-tags-safe: ${{ steps.validate.outputs.target-tags }}
@@ -80,7 +80,7 @@ jobs:
 
   promote:
     needs: [validate-inputs]
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - name: Log in to Docker Hub
         uses: docker/login-action@v3

.github/workflows/release.yml

@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   release:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - name: Checkout code
         uses: actions/checkout@v6

.github/workflows/run-tests.yml

@@ -29,7 +29,7 @@ env:
 jobs:
   test-setup:
     name: Test setup
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     outputs:
       job_matrix: ${{ steps.build_matrix.outputs.job_matrix }}
       full_test_reason: ${{ steps.determine_scope.outputs.full_test_reason }}
@@ -100,11 +100,11 @@ jobs:
       - name: Configure runners
         id: configure_runners
         run: |
-          # Use 8-core runners for temporalio org, standard runners for forks
+          # Use 8-core runners for temporalio org, self-hosted runners for forks.
           if [[ "${{ github.repository_owner }}" == "temporalio" ]]; then
             runner_arm="ubuntu-24.04-arm64-8-cores"
           else
-            runner_arm="ubuntu-24.04-arm"
+            runner_arm="self-hosted"
           fi
           echo "runner_arm=$runner_arm" >> "$GITHUB_OUTPUT"
 
@@ -675,7 +675,7 @@ jobs:
       - unit-test
       - integration-test
       - functional-test
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     env:
       RESULTS: ${{ toJSON(needs.*.result) }}
     steps:
@@ -693,7 +693,7 @@ jobs:
       github.ref == 'refs/heads/main' &&
       needs.test-status.result == 'failure'
     needs: test-status
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     permissions:
       contents: read
       actions: read

.github/workflows/stale.yml

@@ -9,7 +9,7 @@ permissions:
 
 jobs:
   stale_prs:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - name: label stale pull requests
         uses: actions/stale@v9

.github/workflows/trigger-version-info-service.yml

@@ -10,7 +10,7 @@ permissions:
 jobs:
   trigger-vis:
     name: 'Trigger version-info-service release'
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
 
     defaults:
       run: