ci: gate release on successful doc build and validate build-ctk-ver input (#1500)

Author: cpcloud

.github/workflows/build-docs.yml

@@ -47,6 +47,12 @@ jobs:
       run:
         shell: bash -el {0}
     steps:
+      - name: validate build-ctk
+        run: |
+          if [ ! "${{ inputs.build-ctk-ver }}" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]; then
+            echo "error: `build-ctk-ver` ${{ inputs.build-ctk-ver }} version does not match MAJOR.MINOR.MICRO" >&2
+            exit 1
+          fi
       - name: Checkout ${{ github.event.repository.name }}
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
         with:

.github/workflows/release.yml

@@ -135,6 +135,7 @@ jobs:
     needs:
       - check-tag
       - determine-run-id
+      - doc
     secrets: inherit
     uses: ./.github/workflows/release-upload.yml
     with:
@@ -148,6 +149,7 @@ jobs:
     needs:
       - check-tag
       - determine-run-id
+      - doc
     environment:
       name: ${{ inputs.wheel-dst }}
       url: https://${{ (inputs.wheel-dst == 'testpypi' && 'test.') || '' }}pypi.org/p/${{ inputs.component }}/