ci: remove Blacksmith from public checks

* ci: move blacksmith jobs to owned runners

* ci: fix bazel rbe action pins

* ci: allow local fallback for rbe copy actions

* ci: keep public checks on hosted runners

Author: haasonsaas

.bazelrc

@@ -17,7 +17,7 @@ build:remote-gcp-dev --remote_default_exec_properties=container-image=docker://g
 build:remote-gcp-dev --host_platform=//bazel/platforms:linux_x86_64
 build:remote-gcp-dev --platforms=//bazel/platforms:linux_x86_64
 build:remote-gcp-dev --extra_execution_platforms=//bazel/platforms:linux_x86_64
-build:remote-gcp-dev --spawn_strategy=remote
+build:remote-gcp-dev --spawn_strategy=remote,local
 build:remote-gcp-dev --strategy=Genrule=remote
 build:remote-gcp-dev --strategy=PyCompile=remote
 build:remote-gcp-dev --jobs=32

.github/actionlint.yaml

@@ -1,5 +1,4 @@
 self-hosted-runner:
   labels:
-    - blacksmith-4vcpu-ubuntu-2404
     - evalops-orbit-agent-rbe
     - bazel-rbe

.github/workflows/bazel-rbe.yml

@@ -47,10 +47,10 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@de0facc42343c4c3d0f2fb3f1f251f9f7e3ce75b # v6.0.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Go for Bazel tools
-        uses: actions/setup-go@4a3601d38874680202d6939c4edd8cf679bd637a # v6.4.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "1.26.3"
 

.github/workflows/ci.yml

@@ -8,7 +8,7 @@ on:
 
 jobs:
   test:
-    runs-on: blacksmith-4vcpu-ubuntu-2404
+    runs-on: ubuntu-latest
     strategy:
       matrix:
         python-version: ["3.11", "3.12"]