From ccb64c2b4a19087e7fa4d07f5f9440bac645d0be Mon Sep 17 00:00:00 2001
From: Kamil Kozik <kkozik@amplify.com>
Date: Thu, 12 Feb 2026 11:14:53 +0100
Subject: [PATCH 1/2] workflows/codeql-analysis.yml - use self-hosted runners

---
 .github/workflows/codeql-analysis.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 0638f93c..7c6cb482 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -13,7 +13,7 @@ on:
 jobs:
   analyse:
     name: Analyse
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
 
     steps:
       - name: Checkout repository

From d22a9c6a793e87701ca7e76e8c9b340e0963dcb4 Mon Sep 17 00:00:00 2001
From: Kamil Kozik <kkozik@amplify.com>
Date: Thu, 12 Feb 2026 17:04:25 +0100
Subject: [PATCH 2/2] - update .github/workflows to github-hosted-static-ip; -
 drop python 3.7 from pr_check.yml (EOL)

---
 .github/workflows/codeql-analysis.yml    | 2 +-
 .github/workflows/dependencies_check.yml | 2 +-
 .github/workflows/pr_check.yml           | 4 ++--
 .github/workflows/publish.yml            | 2 +-
 .github/workflows/security.yml           | 2 +-
 tox.ini                                  | 5 ++---
 6 files changed, 8 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 7c6cb482..1f39e78a 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -13,7 +13,7 @@ on:
 jobs:
   analyse:
     name: Analyse
-    runs-on: self-hosted
+    runs-on: github-hosted-static-ip
 
     steps:
       - name: Checkout repository
diff --git a/.github/workflows/dependencies_check.yml b/.github/workflows/dependencies_check.yml
index 54930af8..e328d01b 100644
--- a/.github/workflows/dependencies_check.yml
+++ b/.github/workflows/dependencies_check.yml
@@ -14,7 +14,7 @@ on:
 jobs:
   test:
     name: Check dependencies sync between pyproject.toml and requirements.txt
-    runs-on: ubuntu-22.04
+    runs-on: github-hosted-static-ip
     steps:
       - uses: actions/checkout@master
       - name: Set up Python 3.13
diff --git a/.github/workflows/pr_check.yml b/.github/workflows/pr_check.yml
index 5dec6a48..66e44ddb 100644
--- a/.github/workflows/pr_check.yml
+++ b/.github/workflows/pr_check.yml
@@ -10,10 +10,10 @@ on:
 jobs:
   test:
     name: Check code against linter/unit tests
-    runs-on: ubuntu-22.04
+    runs-on: github-hosted-static-ip
     strategy:
       matrix:
-        python-version: ['3.7', '3.8', '3.9', '3.10', '3.11', '3.12', '3.13']
+        python-version: ['3.8', '3.9', '3.10', '3.11', '3.12', '3.13']
     steps:
       - uses: actions/checkout@master
       - name: Set up Python ${{ matrix.python-version }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 6478d407..f4242c57 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -7,7 +7,7 @@ on:
 jobs:
   build-publish:
     name: Build and publish Python distributions
-    runs-on: ubuntu-22.04
+    runs-on: github-hosted-static-ip
     steps:
       - uses: actions/checkout@master
       - name: Set up Python
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 76957d95..b1a3b2f7 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -10,7 +10,7 @@ on:
 
 jobs:
   security:
-    runs-on: self-hosted
+    runs-on: github-hosted-static-ip
     steps:
       - uses: actions/checkout@v4
         with:
diff --git a/tox.ini b/tox.ini
index ed675272..45c926ee 100644
--- a/tox.ini
+++ b/tox.ini
@@ -1,10 +1,9 @@
 [tox]
-envlist={py37}-unit,{py38}-unit,{py39}-unit,{py310}-unit,{py311}-unit,{py312}-unit,{py313}-unit
+envlist={py38}-unit,{py39}-unit,{py310}-unit,{py311}-unit,{py312}-unit,{py313}-unit
 skipsdist=true
 
 [gh-actions]
 python =
-    3.7: py37-unit
     3.8: py38-unit
     3.9: py39-unit
     3.10: py310-unit
@@ -22,7 +21,7 @@ commands =
 [testenv:tf_test]
 whitelist_externals=rm
 passenv = TERRAFORM_CONFIG
-basepython=python3.7
+basepython=python3.12
 commands =
     pip install --upgrade -r test-requirements.txt -e .
     rm -f hcl2/lark_parser.py