Repository navigation
ci: run workflows on Blacksmith runners - #661
Merged
Merged
Conversation
deanq
approved these changes
Oct 30, 2026
deanq
left a comment
deanq
left a comment
Member
There was a problem hiding this comment.
Reviewed: runner labels only, all moved to allowlisted runners (Blacksmith, plus runpod-4vCPU-ubuntu-2404 for trusted publishing). A tag probe in #664 confirmed GITHUB_TOKEN can tag the 2.0.0 release commit, so this unblocks the 2.0.0 release.
2 of 3 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The runpod org now has an IP allow list, and GitHub-hosted runners are outside it. Any job that calls the GitHub API from them fails with
the runpod organization has an IP allow list enabled, even with the defaultGITHUB_TOKEN. This moves every job toblacksmith-2vcpu-ubuntu-2404, the label runpod/main-ui and runpod/runpod-assistant already use.The PyPI jobs in
cd.yml(test-publish,pypi-publish) run onrunpod-4vCPU-ubuntu-2404instead, the org's GitHub-hosted runner with static, allow-listed IPs. Trusted publishing only accepts GitHub-hosted runners, and Blacksmith counts as self-hosted. A probe job on this branch confirmed the runner accepts jobs from this repo. The label is literal because the org variableRUNNER_4VCPU_UBUNTU_2404isn't shared with this repo.