fix(CI): replace runners-privilegedescalation with ubuntu-latest

Updates all workflow files and actionlint config to use ubuntu-latest
instead of the deprecated runners-privilegedescalation self-hosted runner.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

.github/actionlint.yaml

@@ -1,3 +1,2 @@
 self-hosted-runner:
-  labels:
+  labels: []
-    - runners-privilegedescalation

.github/workflows/ci-health-check.yaml

@@ -7,7 +7,7 @@ on:
 
 jobs:
   health-check:
-    runs-on: runners-privilegedescalation
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6

.github/workflows/detect-pr-pipeline.yaml

@@ -11,7 +11,7 @@ permissions:
 
 jobs:
   test-detection-logic:
-    runs-on: runners-privilegedescalation
+    runs-on: ubuntu-latest
     timeout-minutes: 2
     steps:
       - name: Checkout
@@ -21,7 +21,7 @@ jobs:
         run: bash scripts/test-detect-pipeline.sh
 
   detect-pipeline:
-    runs-on: runners-privilegedescalation
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     outputs:
       pipeline-type: ${{ steps.detect.outputs.pipeline-type }}

.github/workflows/plugin-ci.yaml

@@ -11,7 +11,7 @@ on:
 
 jobs:
   ci:
-    runs-on: runners-privilegedescalation
+    runs-on: ubuntu-latest
     timeout-minutes: 10
 
     steps:

.github/workflows/plugin-release.yaml

@@ -35,7 +35,7 @@ concurrency:
 
 jobs:
   check-secrets:
-    runs-on: runners-privilegedescalation
+    runs-on: ubuntu-latest
     outputs:
       ready: ${{ steps.check.outputs.ready }}
     steps:
@@ -61,7 +61,7 @@ jobs:
   check-token-permissions:
     needs: check-secrets
     if: needs.check-secrets.outputs.ready == 'true'
-    runs-on: runners-privilegedescalation
+    runs-on: ubuntu-latest
     outputs:
       has_write: ${{ steps.check.outputs.has_write }}
     steps:
@@ -101,7 +101,7 @@ jobs:
   check-tag:
     needs: check-secrets
     if: needs.check-secrets.outputs.ready == 'true'
-    runs-on: runners-privilegedescalation
+    runs-on: ubuntu-latest
     outputs:
       skip: ${{ steps.check.outputs.skip }}
     steps:
@@ -121,7 +121,7 @@ jobs:
   release:
     needs: [ci, check-tag, check-secrets, check-token-permissions]
     if: needs.check-secrets.outputs.ready == 'true' && needs.check-tag.outputs.skip != 'true' && needs.check-token-permissions.outputs.has_write == 'true'
-    runs-on: runners-privilegedescalation
+    runs-on: ubuntu-latest
     timeout-minutes: 10
 
     steps:

.github/workflows/pr-validation.yaml

@@ -6,7 +6,7 @@ on:
 
 jobs:
   validate:
-    runs-on: runners-privilegedescalation
+    runs-on: ubuntu-latest
     timeout-minutes: 5
 
     steps: