Release waits for tests

Change implementation (reverting 1c0e38a), as current one generates
one skipped run for each main run, that is effectively cluttering
the list of runs for this workflow.

Author: weppos

.github/workflows/release.yml

@@ -2,54 +2,27 @@
 name: Release
 
 on:
-  workflow_run:
-    workflows:
-      - "CI"
-    types:
-      - completed
+  push:
+    tags:
+      - v*.*.*
 
 jobs:
-  validate-tag:
-    name: Check tag
+  wait-for-ci:
+    name: Wait for CI
     runs-on: ubuntu-latest
-    outputs:
-      valid_tag: ${{ steps.validation.outputs.valid_tag }}
-    if: ${{ github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.event == 'push' && startsWith(github.event.workflow_run.head_branch, 'v') }}
     steps:
-      - name: Check out the repository including tags
-        uses: actions/checkout@v6
+      - name: Wait for CI to pass
+        uses: lewagon/wait-on-check-action@v1.5.0
         with:
-          ref: ${{ github.event.workflow_run.head_sha }}
-          fetch-depth: 0
-          fetch-tags: true
-      - name: Validate tag
-        id: validation
-        run: |
-          # Validation is necessary in the unlikely case that a branch matching the tag naming pattern is pushed
-          # and the CI workflow in that branch is modified to run upon a push to that branch
-          REF='${{ github.event.workflow_run.head_branch }}' # This can be a branch or tag name
-          if [[ "$REF" != v*.*.* ]]; then
-            echo "valid_tag=false" >> "$GITHUB_OUTPUT"; exit 0
-          fi
-          # Validate that the tag exists
-          if ! git rev-parse -q --verify "refs/tags/$REF" >/dev/null; then
-            echo "There is no tag matching $REF - $REF is a branch"
-            echo "valid_tag=false" >> "$GITHUB_OUTPUT"; exit 0
-          fi
-          # Validate that the tag is for the same commit that was pushed
-          TAG_SHA="$(git rev-parse "$REF^{commit}")"
-          COMMIT_SHA="${{ github.event.workflow_run.head_sha }}"
-          if [ "$TAG_SHA" != "$COMMIT_SHA" ]; then
-            echo "Tag SHA $TAG_SHA does not match pushed commit SHA $COMMIT_SHA"
-            echo "valid_tag=false" >> "$GITHUB_OUTPUT"; exit 0
-          fi
-          echo "Tag $REF exists and is valid. Tag $TAG_SHA matches the pushed commit $COMMIT_SHA."
-          echo "valid_tag=true"  >> "$GITHUB_OUTPUT"
+          ref: ${{ github.sha }}
+          running-workflow-name: Wait for CI
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          wait-interval: 10
+
   publish:
     name: Publish to PyPI
-    needs: validate-tag
+    needs: wait-for-ci
     runs-on: ubuntu-latest
-    if: ${{ needs.validate-tag.outputs.valid_tag == 'true' && github.event.workflow_run.conclusion == 'success' }}
     steps:
       - uses: actions/checkout@v6