From 9363d2a5acedff76c4a5648e8fe91659a2345e01 Mon Sep 17 00:00:00 2001
From: Alex Wang <wangyb@amazon.com>
Date: Tue, 6 Oct 2026 23:43:32 +0000
Subject: [PATCH] ci: run shared workflows on the CodeBuild runner

Bump the aws-durable-execution-ci and conformance-tests orchestrator pins to the commits that accept a runner input, and pass the CodeBuild runner label from every thin shell.
---
 .github/workflows/ai-pr-review.yml                    | 5 ++++-
 .github/workflows/issue-triage.yml                    | 6 +++++-
 .github/workflows/notify.yml                          | 6 +++++-
 .github/workflows/opentelemetry-conformance-tests.yml | 5 ++++-
 .github/workflows/stale-issue-closer.yml              | 6 +++++-
 5 files changed, 23 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ai-pr-review.yml b/.github/workflows/ai-pr-review.yml
index 94ff842c7..3eef2cf21 100644
--- a/.github/workflows/ai-pr-review.yml
+++ b/.github/workflows/ai-pr-review.yml
@@ -18,8 +18,11 @@ jobs:
       contents: write
       id-token: write
       pull-requests: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review.yml@d6b017da14385908951d23e26c790b28a4e5f9f0
+    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review.yml@d901b2f1a50731f46bb791b7cae6cbe7f56ae917
     with:
+      # CodeBuild-hosted runner in the Python testing account; the label must
+      # match the CodeBuild project name.
+      runs-on: codebuild-github-actions-runner-${{ github.run_id }}-${{ github.run_attempt }}
       prompt-path: .github/prompts/ai-pr-review.md
       run-claude: false
     secrets: inherit
diff --git a/.github/workflows/issue-triage.yml b/.github/workflows/issue-triage.yml
index 0a07ad1c2..41a2543d4 100644
--- a/.github/workflows/issue-triage.yml
+++ b/.github/workflows/issue-triage.yml
@@ -12,5 +12,9 @@ jobs:
       contents: read
       id-token: write
       issues: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/issue-triage.yml@d6b017da14385908951d23e26c790b28a4e5f9f0
+    uses: aws/aws-durable-execution-ci/.github/workflows/issue-triage.yml@d901b2f1a50731f46bb791b7cae6cbe7f56ae917
+    with:
+      # CodeBuild-hosted runner in the Python testing account; the label must
+      # match the CodeBuild project name.
+      runs-on: codebuild-github-actions-runner-${{ github.run_id }}-${{ github.run_attempt }}
     secrets: inherit
diff --git a/.github/workflows/notify.yml b/.github/workflows/notify.yml
index c2eb601b2..db06dd0b0 100644
--- a/.github/workflows/notify.yml
+++ b/.github/workflows/notify.yml
@@ -16,7 +16,11 @@ jobs:
       contents: read
       models: read
       id-token: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/notify.yml@d6b017da14385908951d23e26c790b28a4e5f9f0
+    uses: aws/aws-durable-execution-ci/.github/workflows/notify.yml@d901b2f1a50731f46bb791b7cae6cbe7f56ae917
+    with:
+      # CodeBuild-hosted runner in the Python testing account; the label must
+      # match the CodeBuild project name.
+      runs-on: codebuild-github-actions-runner-${{ github.run_id }}-${{ github.run_attempt }}
     secrets:
       BEDROCK_ROLE_ARN: ${{ secrets.BEDROCK_ROLE_ARN }}
       SLACK_WEBHOOK_URL_PR: ${{ secrets.SLACK_WEBHOOK_URL_PR }}
diff --git a/.github/workflows/opentelemetry-conformance-tests.yml b/.github/workflows/opentelemetry-conformance-tests.yml
index b31fff281..456d51313 100644
--- a/.github/workflows/opentelemetry-conformance-tests.yml
+++ b/.github/workflows/opentelemetry-conformance-tests.yml
@@ -59,8 +59,11 @@ jobs:
       actions: write
       contents: read
       id-token: write
-    uses: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml@a628f5589bbf067a441696c792ab3023c0d0899b
+    uses: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml@3542852f918f515d7c6a53af1eb0d5aa83d1eb1e
     with:
+      # CodeBuild-hosted runner in the Python testing account; the label must
+      # match the CodeBuild project name.
+      runs_on: codebuild-github-actions-runner-${{ github.run_id }}-${{ github.run_attempt }}
       language: python
       resource_prefix: p
       sdk_repository: aws/aws-durable-execution-sdk-python
diff --git a/.github/workflows/stale-issue-closer.yml b/.github/workflows/stale-issue-closer.yml
index e8e59137b..f09646dc6 100644
--- a/.github/workflows/stale-issue-closer.yml
+++ b/.github/workflows/stale-issue-closer.yml
@@ -14,4 +14,8 @@ jobs:
     permissions:
       contents: read
       issues: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml@48b3b4349f7d00a6212b9d959427bd7df81ea99d
+    uses: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml@d901b2f1a50731f46bb791b7cae6cbe7f56ae917
+    with:
+      # CodeBuild-hosted runner in the Python testing account; the label must
+      # match the CodeBuild project name.
+      runs-on: codebuild-github-actions-runner-${{ github.run_id }}-${{ github.run_attempt }}