[CLIENT-4013] CI/CD: Move to ubuntu-slim runner image for certain lightweight jobs

.github/workflows/build-wheels.yml

@@ -151,7 +151,7 @@ jobs:
   get-runner-os:
     outputs:
       runner-os: ${{ steps.get-runner-os.outputs.runner_os }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-slim
     steps:
     - name: Harden the runner (Audit all outbound calls)
       uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3

.github/workflows/bump-version.yml

@@ -43,7 +43,7 @@
 jobs:
   get-current-version:
     name: Get new version string
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-slim
     outputs:
       current_version: ${{ steps.get-current-version.outputs.current_version }}
     steps:
@@ -63,31 +63,31 @@
       run: echo current_version=$(cat VERSION) >> $GITHUB_OUTPUT
 
   get-new-version:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-slim
     needs: get-current-version
     outputs:
       new_version: ${{ steps.get-new-version.outputs.new_version }}
     steps:
     # Checkout branch where workflow is being called from
     - name: Harden the runner (Audit all outbound calls)
       uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
       with:
         egress-policy: audit
 
     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
     - name: Install library that parses PEP 440 versions
       run: pip install parver -c requirements.txt
       working-directory: .github/workflows
 
     - name: Get new version
       id: get-new-version
       run: echo new_version=$(python3 .github/workflows/${CHANGE_VERSION_SCRIPT_NAME}.py "${CURRENT_VERSION}") >> $GITHUB_OUTPUT
       env:
         CURRENT_VERSION: ${{ needs.get-current-version.outputs.current_version }}
         CHANGE_VERSION_SCRIPT_NAME: ${{ inputs.change }}
 
   update-version-in-repo:
     needs: get-new-version
     uses: ./.github/workflows/update-version.yml
     with:

.github/workflows/delete-artifacts.yml

@@ -3,14 +3,14 @@
 
 jobs:
   delete-artifacts:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-slim
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
         with:
           egress-policy: audit
 
       - name: Remove artifacts with dev version
         uses: geekyeggo/delete-artifact@f275313e70c08f6120db482d7a6b98377786765b # v5.1.0
         with:
           name: '*.build'

.github/workflows/dev-to-stage.yml

@@ -11,7 +11,7 @@ jobs:
       # This is always available, but the stage tests only use it if they're being run (i.e not skipped)
       latest-dev-tag: ${{ steps.get-dev-tag.outputs.latest-dev-tag }}
       run_stage_tests: ${{ steps.run_stage_tests.outputs.run_stage_tests }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-slim
     steps:
     - name: Harden the runner (Audit all outbound calls)
       uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3

.github/workflows/fast-forward-merge.yml

@@ -26,23 +26,23 @@
 
 jobs:
   merge:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-slim
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
         with:
           egress-policy: audit
 
       - name: Checkout
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           # Fetch the whole history to prevent unrelated history errors
           fetch-depth: '0'
           ref: ${{ inputs.base_branch }}
           token: ${{ secrets.CLIENT_BOT_PAT }}
 
       - name: Fast forward
         run: git merge --ff-only ${{ inputs.ref_to_merge }}
 
       - name: Upload changes to remote head branch
         run: git push

.github/workflows/smoke-tests.yml

@@ -190,7 +190,7 @@ jobs:
   coverage-upload:
     needs: generate-coverage-report
     if: ${{ !cancelled() }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-slim
     steps:
     - name: Harden the runner (Audit all outbound calls)
       uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
@@ -216,7 +216,7 @@ jobs:
 
   stubtest:
     needs: build
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-slim
     steps:
     - name: Harden the runner (Audit all outbound calls)
       uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3

.github/workflows/update-version.yml

@@ -37,7 +37,7 @@ on:
 jobs:
   update-version-in-repo:
     name: Update version in repo
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-slim
     outputs:
       bump_sha: ${{ steps.get-bump-commit-sha.outputs.bump_sha }}
     steps: