ci: Consolidate check workflows into a single Checks workflow

Merge _check_code.yaml, _check_package.yaml, and _tests.yaml into a single
_checks.yaml that exposes each check as a job. Reduces duplication across
on_master.yaml and on_pull_request.yaml and gives every check the shared
`Checks /` prefix. unit_tests carries `if: inputs.run_tests` so
on_master.yaml can keep skipping tests for "ci" and "docs" commits.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: vdusek

.github/workflows/_check_code.yaml

@@ -0,0 +1,88 @@
+name: Checks
+
+on:
+  # Runs when manually triggered from the GitHub UI.
+  workflow_dispatch:
+    inputs:
+      run_tests:
+        description: Whether to run the unit test suite.
+        required: false
+        type: boolean
+        default: true
+
+  # Runs when invoked by another workflow.
+  workflow_call:
+    inputs:
+      run_tests:
+        description: Whether to run the unit test suite.
+        required: false
+        type: boolean
+        default: true
+
+permissions:
+  contents: read
+
+jobs:
+  actions_lint_check:
+    name: Actions lint check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Run actionlint
+        uses: rhysd/actionlint@v1.7.9
+
+  spell_check:
+    name: Spell check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Check spelling with typos
+        uses: crate-ci/typos@v1
+
+  lint_check:
+    name: Lint check
+    uses: apify/workflows/.github/workflows/python_lint_check.yaml@main
+    with:
+      python_versions: '["3.10", "3.11", "3.12", "3.13", "3.14"]'
+
+  type_check:
+    name: Type check
+    uses: apify/workflows/.github/workflows/python_type_check.yaml@main
+    with:
+      python_versions: '["3.10", "3.11", "3.12", "3.13", "3.14"]'
+
+  unit_tests:
+    name: Unit tests
+    if: inputs.run_tests
+    uses: apify/workflows/.github/workflows/python_unit_tests.yaml@main
+    with:
+      python_versions: '["3.10", "3.11", "3.12", "3.13", "3.14"]'
+      operating_systems: '["ubuntu-latest", "windows-latest"]'
+      tests_concurrency: "1"
+      # Codecov inputs omitted - apify-shared-python doesn't use codecov.
+
+  package_check:
+    name: Package check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Set up uv package manager
+        uses: astral-sh/setup-uv@v8.1.0
+        with:
+          python-version: "3.14"
+
+      - name: Build sdist and wheel
+        run: uv run poe build
+
+      - name: Verify built package
+        uses: apify/actions/python-package-check@v1.1.0
+        with:
+          package_name: apify_shared
+          dist_dir: dist
+          python_version: "3.14"
+          smoke_code: |
+            from apify_shared.consts import WebhookEventType

.github/workflows/_check_package.yaml

@@ -8,15 +8,16 @@ on:
       - "**" # Ignore all tags to avoid duplicate executions triggered by tag pushes.
 
 jobs:
-  code_checks:
-    name: Code checks
-    uses: ./.github/workflows/_check_code.yaml
-
-  tests:
-    # Skip this for "ci" and "docs" commits.
-    if: "!startsWith(github.event.head_commit.message, 'ci') && !startsWith(github.event.head_commit.message, 'docs')"
-    name: Tests
-    uses: ./.github/workflows/_tests.yaml
+  checks:
+    name: Checks
+    uses: ./.github/workflows/_checks.yaml
+    with:
+      # Skip the test suite for "ci" and "docs" commits — they don't change runtime behavior.
+      run_tests: >-
+        ${{
+          !startsWith(github.event.head_commit.message, 'ci') &&
+          !startsWith(github.event.head_commit.message, 'docs')
+        }}
 
   # The beta release is dispatched as a separate workflow run (instead of calling `manual_release_beta.yaml` via `uses:`)
   # because PyPI's Trusted Publishing does not currently support reusable workflows.
@@ -25,7 +26,7 @@ jobs:
     # Skip this for "ci", "docs" and "test" commits and for forks.
     if: "!startsWith(github.event.head_commit.message, 'ci') && !startsWith(github.event.head_commit.message, 'docs') && !startsWith(github.event.head_commit.message, 'test') && startsWith(github.repository, 'apify/')"
     name: Beta release
-    needs: [code_checks, tests]
+    needs: [checks]
     runs-on: ubuntu-latest
     permissions:
       actions: write # Required by execute-workflow.

.github/workflows/_checks.yaml

@@ -13,14 +13,6 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-  code_checks:
-    name: Code checks
-    uses: ./.github/workflows/_check_code.yaml
-
-  package_check:
-    name: Package check
-    uses: ./.github/workflows/_check_package.yaml
-
-  tests:
-    name: Tests
-    uses: ./.github/workflows/_tests.yaml
+  checks:
+    name: Checks
+    uses: ./.github/workflows/_checks.yaml