chore: migrate fast and simple actions to ubuntu-slim runner

.github/workflows/ci.yml

@@ -9,139 +9,139 @@
 
 jobs:
   format:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     # Run from pull_request for non-release-please branches, or pull_request_target for release-please branches only
     if: (github.event_name == 'pull_request' && !startsWith(github.event.pull_request.head.ref, 'release-please--')) || (github.event_name == 'pull_request_target' && startsWith(github.event.pull_request.head.ref, 'release-please--')) || github.event_name == 'workflow_dispatch'
     steps:
       - name: Checkout code
         uses: actions/checkout@v6
         with:
           # For pull_request_target, explicitly checkout the PR head (for security)
           # For regular pull_request and workflow_dispatch, checkout action uses defaults
           ref: ${{ github.event.pull_request.head.sha }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
           node-version: "20"
           cache: "pnpm"
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
       - name: Run Prettier check
         run: pnpm run format:check
 
   lint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     # Run from pull_request for non-release-please branches, or pull_request_target for release-please branches only
     if: (github.event_name == 'pull_request' && !startsWith(github.event.pull_request.head.ref, 'release-please--')) || (github.event_name == 'pull_request_target' && startsWith(github.event.pull_request.head.ref, 'release-please--')) || github.event_name == 'workflow_dispatch'
     steps:
       - name: Checkout code
         uses: actions/checkout@v6
         with:
           # For pull_request_target, explicitly checkout the PR head (for security)
           # For regular pull_request and workflow_dispatch, checkout action uses defaults
           ref: ${{ github.event.pull_request.head.sha }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
           node-version: "20"
           cache: "pnpm"
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
       - name: Run ESLint
         run: pnpm run lint
 
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     # Run from pull_request for non-release-please branches, or pull_request_target for release-please branches only
     if: (github.event_name == 'pull_request' && !startsWith(github.event.pull_request.head.ref, 'release-please--')) || (github.event_name == 'pull_request_target' && startsWith(github.event.pull_request.head.ref, 'release-please--')) || github.event_name == 'workflow_dispatch'
     steps:
       - name: Checkout code
         uses: actions/checkout@v6
         with:
           # For pull_request_target, explicitly checkout the PR head (for security)
           # For regular pull_request and workflow_dispatch, checkout action uses defaults
           ref: ${{ github.event.pull_request.head.sha }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
           node-version: "20"
           cache: "pnpm"
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
       - name: Build TypeScript
         run: pnpm run build
 
   test:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     needs: build
     # Run from pull_request for non-release-please branches, or pull_request_target for release-please branches only
     if: (github.event_name == 'pull_request' && !startsWith(github.event.pull_request.head.ref, 'release-please--')) || (github.event_name == 'pull_request_target' && startsWith(github.event.pull_request.head.ref, 'release-please--')) || github.event_name == 'workflow_dispatch'
     steps:
       - name: Checkout code
         uses: actions/checkout@v6
         with:
           # For pull_request_target, explicitly checkout the PR head (for security)
           # For regular pull_request and workflow_dispatch, checkout action uses defaults
           ref: ${{ github.event.pull_request.head.sha }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
           node-version: "20"
           cache: "pnpm"
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
       - name: Run component tests with coverage
         run: pnpm run test:components
 
       - name: Upload coverage report
         uses: actions/upload-artifact@v6
         if: always()
         with:
           name: component-coverage
           path: coverage/
           retention-days: 7
 
   ready-to-merge:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     needs: [format, lint, build, test]
     # Run from pull_request for non-release-please branches, or pull_request_target for release-please branches only
     if: always() && ((github.event_name == 'pull_request' && !startsWith(github.event.pull_request.head.ref, 'release-please--')) || (github.event_name == 'pull_request_target' && startsWith(github.event.pull_request.head.ref, 'release-please--')) || github.event_name == 'workflow_dispatch')
     steps:
       - name: Check all jobs passed
         run: |
           if [[ "${{ needs.format.result }}" != "success" ]] || \
              [[ "${{ needs.lint.result }}" != "success" ]] || \
              [[ "${{ needs.build.result }}" != "success" ]] || \
              [[ "${{ needs.test.result }}" != "success" ]]; then
             echo "One or more required jobs failed"
             exit 1
           fi
           echo "All required jobs passed!"

.github/workflows/pr-title.yml

@@ -6,49 +6,49 @@
 
 jobs:
   pr-title-check:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     steps:
       - uses: amannn/action-semantic-pull-request@v6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           # Configure which types are allowed
           types: |
             feat
             fix
             docs
             style
             refactor
             perf
             test
             build
             ci
             chore
             revert
           # Require scope to be provided
           requireScope: false
           # Configure which scopes are allowed (empty = any scope allowed)
           scopes: |
             cli
             mcp
             devbox
             benchmark
             secret  
             blueprint
             storage-object
             network-policy
             main
             snapshot
             config
             auth
             deps
           # Ensure the subject starts with a lowercase letter
           subjectPattern: ^(?![A-Z]).+$
           subjectPatternError: |
             The subject "{subject}" found in the pull request title "{title}"
             should start with a lowercase letter.
 
             Examples:
             - feat: add new devbox command
             - fix(cli): resolve argument parsing issue
             - docs: update README with usage examples

.github/workflows/release.yml

@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   release:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
       tag_name: ${{ steps.release.outputs.tag_name }}
@@ -24,7 +24,7 @@ jobs:
   publish:
     needs: release
     if: ${{ needs.release.outputs.release_created == 'true' }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     permissions:
       contents: read
       id-token: write # Required for OIDC