ci: switch to ubicloud runners, remove depot dependency

Author: 2xburnt

.github/workflows/binaries-darwin.yaml

@@ -8,7 +8,7 @@ on:
 jobs:
   build-binaries:
     name: Build xiond-${{ matrix.os }}-${{ matrix.arch }}
-    runs-on: ${{ matrix.arch == 'arm64' && 'depot-ubuntu-24.04-arm-4' || 'depot-ubuntu-24.04-4' }}
+    runs-on: ${{ matrix.arch == 'arm64' && 'ubicloud-standard-4-arm' || 'ubicloud-standard-4' }}
 
     strategy:
       fail-fast: false

.github/workflows/binaries-linux.yaml

@@ -8,7 +8,7 @@ on:
 jobs:
   build-binaries:
     name: Build xiond-${{ matrix.os }}-${{ matrix.arch }}
-    runs-on: ${{ matrix.arch == 'arm64' && 'depot-ubuntu-24.04-arm-4' || 'depot-ubuntu-24.04-4' }}
+    runs-on: ${{ matrix.arch == 'arm64' && 'ubicloud-standard-4-arm' || 'ubicloud-standard-4' }}
 
     strategy:
       fail-fast: false

.github/workflows/claude-code-review.yml

@@ -18,7 +18,7 @@ jobs:
     #   github.event.pull_request.user.login == 'new-developer' ||
     #   github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
 
-    runs-on: depot-ubuntu-24.04
+    runs-on: ubicloud-standard-2
     permissions:
       contents: read
       pull-requests: read

.github/workflows/claude.yml

@@ -17,7 +17,7 @@ jobs:
       (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
       (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
       (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
-    runs-on: depot-ubuntu-24.04
+    runs-on: ubicloud-standard-2
     permissions:
       contents: read
       pull-requests: read

.github/workflows/docker-build.yaml

@@ -8,7 +8,7 @@ on:
 jobs:
   build-docker-images:
     name: Build ${{ matrix.os }}/${{ matrix.arch }}
-    runs-on: ${{ matrix.arch == 'arm64' && 'depot-ubuntu-24.04-arm' || 'depot-ubuntu-24.04' }}
+    runs-on: ${{ matrix.arch == 'arm64' && 'ubicloud-standard-4-arm' || 'ubicloud-standard-4' }}
 
     strategy:
       fail-fast: false
@@ -28,8 +28,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v5
 
-      - name: Set up Depot
-        uses: depot/setup-action@v1
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
 
       - name: Download artifacts
         uses: actions/download-artifact@v4
@@ -46,9 +46,8 @@ jobs:
 
       - name: Build Docker Image
         id: build-docker
-        uses: depot/build-push-action@v1
+        uses: docker/build-push-action@v6
         with:
-          project: cp89wgwf7x
           context: .
           target: release
           push: false

.github/workflows/docker-push.yaml

@@ -14,7 +14,7 @@ env:
 jobs:
   merge:
     name: Create registry manifests
-    runs-on: depot-ubuntu-24.04
+    runs-on: ubicloud-standard-2
     permissions:
       id-token: write
       contents: read

.github/workflows/docker-scout.yaml

@@ -8,7 +8,7 @@ on:
 jobs:
   docker-scout:
     name: main
-    runs-on: depot-ubuntu-24.04
+    runs-on: ubicloud-standard-2
     permissions:
       contents: read
       pull-requests: write

.github/workflows/e2e-tests.yaml

@@ -10,7 +10,7 @@ env:
 
 jobs:
   e2e-tests:
-    runs-on: ${{ matrix.arch == 'arm64' && 'depot-ubuntu-24.04-arm-4' || 'depot-ubuntu-24.04-4' }}
+    runs-on: ${{ matrix.arch == 'arm64' && 'ubicloud-standard-4-arm' || 'ubicloud-standard-4' }}
     strategy:
       fail-fast: false
       matrix:

.github/workflows/exec-goreleaser.yaml

@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   build-release:
-    runs-on: depot-ubuntu-24.04
+    runs-on: ubicloud-standard-2
 
     steps:
       - name: Checkout
@@ -75,9 +75,13 @@ jobs:
 
       - name: Install syft
         uses: anchore/sbom-action/download-syft@v0
+        with:
+          syft-version: v1.42.3
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@v7
         env:
           GORELEASER_CURRENT_TAG: ${{ github.ref_name }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/extract-binaries-linux.yaml

@@ -8,7 +8,7 @@ on:
 jobs:
   extract-binaries:
     name: Extract xiond-${{ matrix.os }}-${{ matrix.arch }}
-    runs-on: ${{ matrix.arch == 'arm64' && 'depot-ubuntu-24.04-arm' || 'depot-ubuntu-24.04' }}
+    runs-on: ${{ matrix.arch == 'arm64' && 'ubicloud-standard-2-arm' || 'ubicloud-standard-2' }}
 
     strategy:
       fail-fast: false