Merge pull request #504 from cipherstash/ci/release-github-hosted-for-provenance

ci: run release on github-hosted runner for npm provenance

Author: coderdan

.github/workflows/release.yml

@@ -17,7 +17,10 @@ concurrency: ${{ github.workflow }}-${{ github.ref }}
 jobs:
   release:
     name: Release
-    runs-on: blacksmith-4vcpu-ubuntu-2404
+    # GitHub-hosted (not Blacksmith): npm provenance attestations, which are
+    # generated automatically by OIDC trusted publishing, are only accepted
+    # from github-hosted runners — self-hosted runners are rejected with E422.
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v6