Replaces ubuntu-slim by ubuntu-26.04

Author: kdeldycke

.github/workflows/_release-build.yaml

@@ -60,7 +60,7 @@ jobs:
     if: >-
       github.event_name == 'push'
       && startsWith(github.event.head_commit.message, 'Release `v')
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       issues: write
     steps:
@@ -107,7 +107,7 @@ jobs:
 
   metadata:
     name: 🧬 Project metadata
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     outputs:
       metadata: ${{ steps.metadata.outputs.metadata }}
     steps:
@@ -145,7 +145,7 @@ jobs:
     needs:
       - metadata
     if: fromJSON(needs.metadata.outputs.metadata).is_python_project
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
@@ -181,7 +181,7 @@ jobs:
       matrix: >-
         ${{ fromJSON(needs.metadata.outputs.metadata).release_commits_matrix
         || fromJSON(needs.metadata.outputs.metadata).new_commits_matrix }}
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       id-token: write
     steps:

.github/workflows/_release-engine.yaml

@@ -43,7 +43,7 @@ jobs:
 
   metadata:
     name: 🧬 Project metadata
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     outputs:
       has_virustotal_key: ${{ steps.check-vt-key.outputs.has_key }}
       metadata: ${{ steps.metadata.outputs.metadata }}
@@ -476,7 +476,7 @@ jobs:
     if: github.ref == 'refs/heads/main' && fromJSON(needs.metadata.outputs.metadata).release_commits_matrix
     strategy:
       matrix: ${{ fromJSON(needs.metadata.outputs.metadata).release_commits_matrix }}
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
     steps:
@@ -512,7 +512,7 @@ jobs:
     if: always() && needs.create-tag.result == 'success'
     strategy:
       matrix: ${{ fromJSON(needs.metadata.outputs.metadata).release_commits_matrix }}
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       # Allow project without REPOMATIC_PAT to create a GitHub release.
       contents: write
@@ -588,7 +588,7 @@ jobs:
       && fromJSON(needs.metadata.outputs.metadata).manpages_script != ''
     strategy:
       matrix: ${{ fromJSON(needs.metadata.outputs.metadata).release_commits_matrix }}
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       attestations: write
       contents: write
@@ -674,7 +674,7 @@ jobs:
       && join(fromJSON(needs.metadata.outputs.metadata).release_assets) != ''
     strategy:
       matrix: ${{ fromJSON(needs.metadata.outputs.metadata).release_commits_matrix }}
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       attestations: write
       contents: write
@@ -771,7 +771,7 @@ jobs:
       && needs.extra-assets.result != 'failure'
     strategy:
       matrix: ${{ fromJSON(needs.metadata.outputs.metadata).release_commits_matrix }}
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
     steps:
@@ -845,7 +845,7 @@ jobs:
       # Each cell commits scan records to the default branch; serializing the
       # (rare) multi-release runs keeps them from racing on the same files.
       max-parallel: 1
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     # Upload plus the 600 s --poll-timeout, with margin; a stuck poll must not
     # squat a runner-cap slot for the 360-min default.
     timeout-minutes: 15
@@ -940,7 +940,7 @@ jobs:
     concurrency:
       group: sync-dev-release-${{ github.repository }}
       cancel-in-progress: false
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
     steps:
@@ -972,7 +972,7 @@ jobs:
     if: >
       fromJSON(needs.metadata.outputs.metadata).is_python_project
       && fromJSON(needs.metadata.outputs.metadata).release_commits_matrix
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write

.github/workflows/autofix.yaml

@@ -49,7 +49,7 @@ jobs:
     if: >
       (github.event_name == 'push' || github.event_name == 'workflow_dispatch')
       && !startsWith(github.event.head_commit.message || '', '[changelog] ')
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       issues: write
     steps:
@@ -74,7 +74,7 @@ jobs:
     # context and manages the caller's own issue. See
     # repomatic/runner_images.py for why the announcement feed is the source.
     if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       issues: write
     steps:
@@ -104,7 +104,7 @@ jobs:
       !contains(fromJSON('["major-version-increment","minor-version-increment","prepare-release"]'),
       github.head_ref)
       && !startsWith(github.event.head_commit.message || '', '[changelog] ')
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     outputs:
       metadata: ${{ steps.metadata.outputs.metadata }}
     steps:
@@ -130,7 +130,7 @@ jobs:
       - metadata
     # Ruff can format code in both Python and Markdown files.
     if: fromJSON(needs.metadata.outputs.metadata).python_files || fromJSON(needs.metadata.outputs.metadata).doc_files
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -184,7 +184,7 @@ jobs:
     needs:
       - metadata
     if: fromJSON(needs.metadata.outputs.metadata).is_python_project
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -227,13 +227,14 @@ jobs:
     needs:
       - metadata
     if: fromJSON(needs.metadata.outputs.metadata).markdown_files
-    # Back on the lean default: shfmt was the only reason this job needed a full
-    # image, and `repomatic run mdformat` now provisions it through mdformat's
-    # `path_tools` instead of apt. ARM would run the per-file mdformat pass
-    # ~1.26x faster, but mdformat-config pulls taplo, which ships no
-    # linux-aarch64 wheel and has a broken 0.9.3 sdist; stay on x86 until taplo
-    # publishes an aarch64 wheel. See docs/test-matrix.md.
-    runs-on: ubuntu-slim
+    # The heaviest light job, and the only one where the image's CPU shows up at
+    # all: it spawns one mdformat per file. ARM would run that pass ~1.26x
+    # faster, but mdformat-config pulls taplo, which ships no linux-aarch64
+    # wheel and has a broken 0.9.3 sdist, so this job stays on x86 whatever the
+    # rest of the fleet does. `shfmt` no longer pins it to a full image either
+    # way: `repomatic run mdformat` provisions that through mdformat's
+    # `path_tools` instead of apt. See docs/test-matrix.md.
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -287,7 +288,7 @@ jobs:
     needs:
       - metadata
     if: fromJSON(needs.metadata.outputs.metadata).shfmt_files
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -332,7 +333,7 @@ jobs:
     needs:
       - metadata
     if: fromJSON(needs.metadata.outputs.metadata).json_files
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -384,7 +385,7 @@ jobs:
     # gate the metadata job carries.
     if: >
       !startsWith(github.event.head_commit.message || '', '[changelog] ')
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -426,7 +427,7 @@ jobs:
     needs:
       - metadata
     if: fromJSON(needs.metadata.outputs.metadata).is_python_project
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -473,7 +474,7 @@ jobs:
     # gate the metadata job carries.
     if: >
       !startsWith(github.event.head_commit.message || '', '[changelog] ')
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -509,7 +510,7 @@ jobs:
     needs:
       - metadata
     if: fromJSON(needs.metadata.outputs.metadata).image_files
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -565,7 +566,7 @@ jobs:
     needs:
       - metadata
     if: fromJSON(needs.metadata.outputs.metadata).gitignore_exists
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -597,10 +598,10 @@ jobs:
     name: 🔄 Sync bumpversion config
     needs:
       - metadata
-    runs-on: ubuntu-slim
     # is_python_package, not is_python_project: a uv virtual project
     # ([tool.uv] package = false) has a [project] table but nothing to version.
     if: fromJSON(needs.metadata.outputs.metadata).is_python_package
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -633,7 +634,7 @@ jobs:
     needs:
       - metadata
     if: fromJSON(needs.metadata.outputs.metadata).mailmap_exists
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -675,7 +676,7 @@ jobs:
     # each needs its own branch and PR body.
     needs:
       - metadata
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -846,7 +847,7 @@ jobs:
     if: >
       fromJSON(needs.metadata.outputs.metadata).is_python_project
       && fromJSON(needs.metadata.outputs.metadata).active_autodoc
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write

.github/workflows/autolock.yaml

@@ -26,7 +26,7 @@ jobs:
 
   lock:
     name: 🔒 Lock inactive threads
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       issues: write
       pull-requests: write

.github/workflows/cancel-runs.yaml

@@ -31,7 +31,7 @@ jobs:
   cancel-runs:
     name: ✂️ Cancel PR runs
     if: github.event.pull_request.number
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       actions: write
     steps:

.github/workflows/changelog.yaml

@@ -71,7 +71,7 @@ jobs:
       github.event_name == 'workflow_dispatch' ||
       github.event_name == 'push' ||
       (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success')
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     outputs:
       metadata: ${{ steps.metadata.outputs.metadata }}
     steps:
@@ -102,7 +102,7 @@ jobs:
     if: >-
       github.event_name == 'workflow_run'
       || !fromJSON(needs.metadata.outputs.metadata).release_commits_matrix
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -143,7 +143,7 @@ jobs:
     needs:
       - metadata
     # Always run since metadata already filters appropriate events.
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write
@@ -232,7 +232,7 @@ jobs:
     # push trigger on paths-matching commits, but create-pull-request no-ops when
     # the branch is already current, so the extra run is cheap and idempotent.
     if: github.event_name != 'schedule'
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       contents: write
       pull-requests: write

.github/workflows/debug.yaml

@@ -40,7 +40,7 @@ jobs:
 
   metadata:
     name: 🧬 Project metadata
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     outputs:
       build_targets: ${{ steps.extend-matrix.outputs.targets }}
     steps:

.github/workflows/docs.yaml

@@ -42,7 +42,7 @@ jobs:
 
   metadata:
     name: 🧬 Project metadata
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     outputs:
       metadata: ${{ steps.metadata.outputs.metadata }}
     steps:
@@ -64,7 +64,7 @@ jobs:
     if: >-
       fromJSON(needs.metadata.outputs.metadata).is_python_project
       && fromJSON(needs.metadata.outputs.metadata).is_sphinx
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-26.04
     permissions:
       id-token: write
       pages: write