diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 56b7e46e3..d8c463a49 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -1,38 +1,38 @@
-name : Publish Release
+name: Publish Release
 
-on :
+on:
   workflow_dispatch:
 
-jobs :
-  publish-release :
-    runs-on : ubuntu-latest
-    if : github.repository == 'square/workflow-kotlin'
-    timeout-minutes : 35
+jobs:
+  publish-release:
+    runs-on: macos-latest
+    if: github.repository == 'square/workflow-kotlin'
+    timeout-minutes: 35
 
-    steps :
-      - uses : actions/checkout@v3
-      - uses : gradle/wrapper-validation-action@v1
+    steps:
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+      - uses: gradle/wrapper-validation-action@v1
 
-      - name : Ensure this isn't a -SNAPSHOT version
-        uses : ./.github/actions/gradle-task
-        with :
-          task : checkVersionIsNotSnapshot
+      - name: Ensure this isn't a -SNAPSHOT version
+        uses: ./.github/actions/gradle-task
+        with:
+          task: checkVersionIsNotSnapshot
 
-      - name : Assemble
-        uses : ./.github/actions/gradle-task
-        with :
-          task : assemble
+      - name: Assemble
+        uses: ./.github/actions/gradle-task
+        with:
+          task: assemble
 
-      - name : Check
-        uses : ./.github/actions/gradle-task
-        with :
-          task : check -x artifactsCheck
+      - name: Check
+        uses: ./.github/actions/gradle-task
+        with:
+          task: check -x artifactsCheck
 
-      - name : Publish Release
-        uses : ./.github/actions/gradle-task
-        with :
-          task : publish
-        env :
-          ORG_GRADLE_PROJECT_mavenCentralUsername : ${{ secrets.SONATYPE_NEXUS_USERNAME }}
-          ORG_GRADLE_PROJECT_mavenCentralPassword : ${{ secrets.SONATYPE_NEXUS_PASSWORD }}
-          ORG_GRADLE_PROJECT_signingInMemoryKey : ${{ secrets.ARTIFACT_SIGNING_PRIVATE_KEY }}
+      - name: Publish Release
+        uses: ./.github/actions/gradle-task
+        with:
+          task: publish
+        env:
+          ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.SONATYPE_NEXUS_USERNAME }}
+          ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.SONATYPE_NEXUS_PASSWORD }}
+          ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.ARTIFACT_SIGNING_PRIVATE_KEY }}
diff --git a/.github/workflows/publish-snapshot.yml b/.github/workflows/publish-snapshot.yml
index 204492e0b..268862b1c 100644
--- a/.github/workflows/publish-snapshot.yml
+++ b/.github/workflows/publish-snapshot.yml
@@ -8,12 +8,13 @@ on:
 
 jobs:
   publish-snapshot:
-    runs-on: workflow-kotlin-test-runner-ubuntu-4core
+    runs-on: macos-latest
     if: github.repository == 'square/workflow-kotlin'
     timeout-minutes: 35
 
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+      - uses: gradle/wrapper-validation-action@v1
 
       - name: Check for -SNAPSHOT version
         uses: ./.github/actions/gradle-task