diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index e2f22efa7..f8fc7415e 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -28,7 +28,7 @@ jobs:
 
   test-publish:
     if: github.ref == 'refs/heads/staging'
-    runs-on: ubuntu-latest
+    runs-on: runpod-4vCPU-ubuntu-2404 # GitHub-hosted (trusted publishing needs that) with allow-listed static IPs
     environment: test-release
     permissions:
       contents: read
@@ -58,7 +58,7 @@ jobs:
 
   release-please:
     if: github.ref == 'refs/heads/main'
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
       tag_name: ${{ steps.release.outputs.tag_name }}
@@ -74,7 +74,7 @@ jobs:
     name: PyPI Publish
     needs: release-please
     if: ${{ always() && (needs.release-please.outputs.release_created || (github.event_name == 'workflow_dispatch' && inputs.force_publish == 'true')) }}
-    runs-on: ubuntu-latest
+    runs-on: runpod-4vCPU-ubuntu-2404 # GitHub-hosted (trusted publishing needs that) with allow-listed static IPs
     environment:
       name: pypi-production
       url: https://pypi.org/project/runpod/
@@ -109,7 +109,7 @@ jobs:
   linear-sync:
     name: Linear Release Sync
     needs: release-please
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
     permissions:
       contents: read
     steps:
@@ -128,7 +128,7 @@ jobs:
     name: Linear Release Complete
     if: ${{ needs.release-please.outputs.release_created }}
     needs: [release-please, linear-sync]
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
     permissions:
       contents: read
     steps:
@@ -148,7 +148,7 @@ jobs:
   #   name: Notify workers
   #   needs: [release-please, pypi-publish]
   #   if: ${{ needs.release-please.outputs.release_created || (github.event_name == 'workflow_dispatch' && inputs.force_publish == 'true') }}
-  #   runs-on: ubuntu-latest
+  #   runs-on: blacksmith-2vcpu-ubuntu-2404
   #   strategy:
   #     matrix:
   #       repo:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5203d6c27..a4b726f19 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
 
   test:
     if: github.event_name != 'schedule'
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
     strategy:
       matrix:
         python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
@@ -57,7 +57,7 @@ jobs:
 
   e2e:
     if: github.event_name != 'schedule' && github.repository == 'runpod/runpod-python'
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@v7
@@ -90,7 +90,7 @@ jobs:
 
   codeql:
     if: github.event_name == 'schedule' || github.event_name == 'pull_request'
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
     permissions:
       actions: read
       contents: read
@@ -117,7 +117,7 @@ jobs:
   # ──────────────────────────────────────────────
 
   validation:
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
     needs: [test, e2e, codeql]
     if: always()
     steps:
diff --git a/.github/workflows/vhs.yml b/.github/workflows/vhs.yml
index 9aee70027..e18e61955 100644
--- a/.github/workflows/vhs.yml
+++ b/.github/workflows/vhs.yml
@@ -8,7 +8,7 @@ on:
 
 jobs:
   vhs:
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v7