fix: pin callers to the canonical runtime

Author: 0xPlayerOne

.github/code-foundry.yml

@@ -6,7 +6,7 @@ languages: typescript
 features: all
 package_manager: bun
 runtime_repository: 0xPlayerOne/code-foundry
-runtime_ref: v0.20.2
+runtime_ref: v0.22.0
 release_type: node
 npm_publish: true
 license: agpl-3.0-or-later

.github/template.yml

@@ -13,8 +13,9 @@ permissions:
 jobs:
   ci:
     name: CI
-    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-ci.yml@v0.20.2
+    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-ci.yml@v0.22.0
     with:
       runtime-repository: 0xPlayerOne/code-foundry
-      runtime-ref: v0.20.2
+      runtime-ref: v0.22.0
+      runner: ubuntu-latest
     secrets: inherit

.github/workflows/ci.yml

@@ -18,8 +18,9 @@ permissions:
 jobs:
   codeql:
     name: CodeQL
-    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-codeql.yml@v0.20.2
+    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-codeql.yml@v0.22.0
     with:
       runtime-repository: 0xPlayerOne/code-foundry
-      runtime-ref: v0.20.2
+      runtime-ref: v0.22.0
+      runner: ubuntu-latest
     secrets: inherit

.github/workflows/codeql.yml

@@ -18,5 +18,7 @@ permissions:
 jobs:
   draft-pr:
     name: Draft PR
-    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-draft-pr.yml@v0.20.2
+    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-draft-pr.yml@v0.22.0
+    with:
+      runner: ubuntu-slim
     secrets: inherit

.github/workflows/draft-pr.yml

@@ -11,5 +11,7 @@ permissions:
 jobs:
   release-pr:
     name: Release PR
-    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-release-pr.yml@v0.20.2
+    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-release-pr.yml@v0.22.0
+    with:
+      runner: ubuntu-slim
     secrets: inherit

.github/workflows/release-pr.yml

@@ -14,5 +14,7 @@ permissions:
 jobs:
   release:
     name: Release
-    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-release.yml@v0.20.2
+    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-release.yml@v0.22.0
+    with:
+      runner: ubuntu-slim
     secrets: inherit

.github/workflows/release.yml

@@ -13,8 +13,9 @@ permissions:
 jobs:
   security:
     name: Security
-    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-security.yml@v0.20.2
+    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-security.yml@v0.22.0
     with:
       runtime-repository: 0xPlayerOne/code-foundry
-      runtime-ref: v0.20.2
+      runtime-ref: v0.22.0
+      runner: ubuntu-slim
     secrets: inherit

.github/workflows/security.yml

@@ -13,8 +13,10 @@ permissions:
 jobs:
   test:
     name: Test
-    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-test.yml@v0.20.2
+    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-test.yml@v0.22.0
     with:
       runtime-repository: 0xPlayerOne/code-foundry
-      runtime-ref: v0.20.2
+      runtime-ref: v0.22.0
+      runner: ubuntu-latest
+      unit-runner: ubuntu-slim
     secrets: inherit