ci: Gate manual release workflows on wait-for-checks

Replace the in-release re-run of code_checks with a wait-for-checks step that
verifies the relevant checks already passed on the dispatch commit (they run
via on_master.yaml on every push). Saves the redundant re-run on stable
release and also brings Tests into the gate; adds gates to beta release and
the docs workflows that previously had none. Pinned to the apify/workflows
PR branch — switch to a tagged release once apify/workflows#238 is merged.

Author: vdusek

.github/workflows/manual_release_beta.yaml

@@ -16,8 +16,25 @@ permissions:
   contents: read
 
 jobs:
+  wait_for_checks:
+    # Verify that `Code checks` and `Tests` already completed successfully on the dispatch commit
+    # (they run via `on_master.yaml` on every push to master). For the auto-dispatched path from
+    # `on_master.yaml`, these are guaranteed by `needs:` already; this also gates manual dispatches.
+    # TODO: switch from the PR branch to a tagged release once apify/workflows#238 is merged.
+    name: Wait for required checks
+    runs-on: ubuntu-latest
+    permissions:
+      checks: read
+    steps:
+      - name: Wait for Code checks and Tests
+        uses: apify/workflows/wait-for-checks@wait-for-checks-action
+        with:
+          ref: ${{ github.sha }}
+          check-regexp: '^(Code checks|Tests)'
+
   release_prepare:
     name: Release prepare
+    needs: [wait_for_checks]
     runs-on: ubuntu-latest
     outputs:
       version_number: ${{ steps.release_prepare.outputs.version_number }}

.github/workflows/manual_release_docs.yaml

@@ -23,9 +23,21 @@ jobs:
       contents: write
       pages: write
       id-token: write
+      checks: read
     runs-on: ubuntu-latest
 
     steps:
+      # Verify `Doc checks` already passed on the dispatch commit (they run via `on_master.yaml`
+      # on every push to master). Skipped when this workflow is invoked via `workflow_call` from
+      # another release workflow — the parent has already gated on the relevant checks.
+      # TODO: switch from the PR branch to a tagged release once apify/workflows#238 is merged.
+      - name: Wait for Doc checks
+        if: github.event_name == 'workflow_dispatch'
+        uses: apify/workflows/wait-for-checks@wait-for-checks-action
+        with:
+          ref: ${{ github.sha }}
+          check-regexp: '^Doc checks'
+
       - name: Checkout repository
         uses: actions/checkout@v6
         with:

.github/workflows/manual_release_stable.yaml

@@ -29,13 +29,24 @@ permissions:
   contents: read
 
 jobs:
-  code_checks:
-    name: Code checks
-    uses: ./.github/workflows/_check_code.yaml
+  wait_for_checks:
+    # Verify that `Code checks` and `Tests` already completed successfully on the dispatch commit
+    # (they run via `on_master.yaml` on every push to master). Avoids re-running them on release.
+    # TODO: switch from the PR branch to a tagged release once apify/workflows#238 is merged.
+    name: Wait for required checks
+    runs-on: ubuntu-latest
+    permissions:
+      checks: read
+    steps:
+      - name: Wait for Code checks and Tests
+        uses: apify/workflows/wait-for-checks@wait-for-checks-action
+        with:
+          ref: ${{ github.sha }}
+          check-regexp: '^(Code checks|Tests)'
 
   release_prepare:
     name: Release prepare
-    needs: [code_checks]
+    needs: [wait_for_checks]
     runs-on: ubuntu-latest
     outputs:
       version_number: ${{ steps.release_prepare.outputs.version_number }}

.github/workflows/manual_version_docs.yaml

@@ -36,8 +36,20 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      checks: read
 
     steps:
+      # Verify `Doc checks` already passed on the dispatch commit (they run via `on_master.yaml`
+      # on every push to master). Skipped when invoked via `workflow_call` from the stable release —
+      # the parent has already gated on the relevant checks.
+      # TODO: switch from the PR branch to a tagged release once apify/workflows#238 is merged.
+      - name: Wait for Doc checks
+        if: github.event_name == 'workflow_dispatch'
+        uses: apify/workflows/wait-for-checks@wait-for-checks-action
+        with:
+          ref: ${{ github.sha }}
+          check-regexp: '^Doc checks'
+
       - name: Checkout repository
         uses: actions/checkout@v6
         with: