diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c206084..9486db6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,9 +17,7 @@ env:
 jobs:
   build:
     name: Build
-    # Self-hosted runner on orion.local (Apple M4 Pro, arm64). To fall back to
-    # GitHub-hosted, change this line to: runs-on: ubuntu-latest
-    runs-on: [self-hosted, orion]
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 33d4f11..1701aec 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,7 +13,7 @@ env:
 jobs:
   release:
     name: Build and publish plugin
-    runs-on: [self-hosted, orion]
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
@@ -43,8 +43,6 @@ jobs:
       - name: Build plugin zip
         run: ./gradlew assemble --no-daemon
 
-      # Use the action rather than the gh CLI — the self-hosted runner container
-      # has no gh installed.
       - name: Publish release
         uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
         with:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ad9f8f7..83adcf7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+- CI moved off the self-hosted orion runner fleet onto `ubuntu-latest`. The
+  fleet (colima/Docker on orion.local) is being decommissioned org-wide; no
+  behavior change to the tool.
+
 ### Security
 - **Dependabot now bumps the SHA-pinned actions and the Gradle plugins (#80).**
   CI was already fully SHA-pinned, but nothing ever moved those pins — and a