Use default opam repos in CI

Author: tiensonqin

.github/workflows/ci.yml

@@ -28,12 +28,6 @@ jobs:
         with:
           ocaml-compiler: 5.2.1
 
-      - name: Add Jane Street preview repositories
-        run: |
-          opam repo add janestreet-bleeding-external git+https://github.com/janestreet/opam-repository.git#external-packages
-          opam repo add janestreet-bleeding git+https://github.com/janestreet/opam-repository.git
-          opam update
-
       - name: Install OCaml dependencies
         run: opam install . --deps-only --with-test -y
 

scripts/check-ci-workflow.sh

@@ -40,7 +40,7 @@ reject_contains() {
 require_contains \
   "$workflow" \
   "runs-on: macos-15-intel" \
-  "CI must run on Intel macOS because bonsai_apple needs Apple headers and current Melange dependencies fail on macOS arm64."
+  "CI must run on a pinned macOS runner because bonsai_apple builds stubs that include dispatch/dispatch.h."
 
 reject_contains \
   "$workflow" \
@@ -50,7 +50,12 @@ reject_contains \
 reject_contains \
   "$workflow" \
   "runs-on: macos-latest" \
-  "CI must not use macos-latest because it currently selects an arm64 runner for public repositories."
+  "CI must not use macos-latest because the backing image can drift under this Apple-specific build."
+
+reject_contains \
+  "$workflow" \
+  "janestreet-bleeding" \
+  "CI must not add Jane Street bleeding repositories because they can select preview dependencies incompatible with fresh macOS runners."
 
 require_contains \
   "$workflow" \