diff --git a/.github/workflows/_check_code.yaml b/.github/workflows/_check_code.yaml
deleted file mode 100644
index 21d9df33..00000000
--- a/.github/workflows/_check_code.yaml
+++ /dev/null
@@ -1,42 +0,0 @@
-name: Code checks
-
-on:
-  # Runs when manually triggered from the GitHub UI.
-  workflow_dispatch:
-
-  # Runs when invoked by another workflow.
-  workflow_call:
-
-permissions:
-  contents: read
-
-jobs:
-  actions_lint_check:
-    name: Actions lint check
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-      - name: Run actionlint
-        uses: rhysd/actionlint@v1.7.11
-
-  spell_check:
-    name: Spell check
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-      - name: Check spelling with typos
-        uses: crate-ci/typos@v1
-
-  lint_check:
-    name: Lint check
-    uses: apify/workflows/.github/workflows/python_lint_check.yaml@main
-    with:
-      python_versions: '["3.10", "3.11", "3.12", "3.13", "3.14"]'
-
-  type_check:
-    name: Type check
-    uses: apify/workflows/.github/workflows/python_type_check.yaml@main
-    with:
-      python_versions: '["3.10", "3.11", "3.12", "3.13", "3.14"]'
diff --git a/.github/workflows/_check_docs.yaml b/.github/workflows/_check_docs.yaml
deleted file mode 100644
index 893e0db0..00000000
--- a/.github/workflows/_check_docs.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-name: Doc checks
-
-on:
-  # Runs when manually triggered from the GitHub UI.
-  workflow_dispatch:
-
-  # Runs when invoked by another workflow.
-  workflow_call:
-
-permissions:
-  contents: read
-
-jobs:
-  doc_checks:
-    name: Doc checks
-    uses: apify/workflows/.github/workflows/python_docs_check.yaml@main
diff --git a/.github/workflows/_check_package.yaml b/.github/workflows/_check_package.yaml
deleted file mode 100644
index 95011138..00000000
--- a/.github/workflows/_check_package.yaml
+++ /dev/null
@@ -1,38 +0,0 @@
-name: Package check
-
-on:
-  # Runs when manually triggered from the GitHub UI.
-  workflow_dispatch:
-
-  # Runs when invoked by another workflow.
-  workflow_call:
-
-permissions:
-  contents: read
-
-jobs:
-  package_check:
-    name: Package check
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-
-      - name: Set up uv package manager
-        uses: astral-sh/setup-uv@v8.1.0
-        with:
-          python-version: "3.14"
-
-      - name: Build sdist and wheel
-        run: uv run poe build
-
-      - name: Verify built package
-        uses: apify/actions/python-package-check@v1.1.0
-        with:
-          package_name: apify
-          dist_dir: dist
-          python_version: "3.14"
-          smoke_code: |
-            from apify import Actor, Configuration, ProxyConfiguration
-            Configuration()
-            ProxyConfiguration()
diff --git a/.github/workflows/_tests.yaml b/.github/workflows/_checks.yaml
similarity index 57%
rename from .github/workflows/_tests.yaml
rename to .github/workflows/_checks.yaml
index 8999b61e..d9b05457 100644
--- a/.github/workflows/_tests.yaml
+++ b/.github/workflows/_checks.yaml
@@ -1,18 +1,61 @@
-name: Tests
+name: Checks
 
 on:
   # Runs when manually triggered from the GitHub UI.
   workflow_dispatch:
+    inputs:
+      run_tests:
+        description: Whether to run the test suites (unit, integration, E2E).
+        required: false
+        type: boolean
+        default: true
 
   # Runs when invoked by another workflow.
   workflow_call:
+    inputs:
+      run_tests:
+        description: Whether to run the test suites (unit, integration, E2E).
+        required: false
+        type: boolean
+        default: true
 
 permissions:
   contents: read
 
 jobs:
+  actions_lint_check:
+    name: Actions lint check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Run actionlint
+        uses: rhysd/actionlint@v1.7.11
+
+  spell_check:
+    name: Spell check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Check spelling with typos
+        uses: crate-ci/typos@v1
+
+  lint_check:
+    name: Lint check
+    uses: apify/workflows/.github/workflows/python_lint_check.yaml@main
+    with:
+      python_versions: '["3.10", "3.11", "3.12", "3.13", "3.14"]'
+
+  type_check:
+    name: Type check
+    uses: apify/workflows/.github/workflows/python_type_check.yaml@main
+    with:
+      python_versions: '["3.10", "3.11", "3.12", "3.13", "3.14"]'
+
   unit_tests:
     name: Unit tests
+    if: inputs.run_tests
     uses: apify/workflows/.github/workflows/python_unit_tests.yaml@main
     secrets: inherit
     with:
@@ -27,9 +70,11 @@ jobs:
 
     if: >-
       ${{
-        (github.event_name == 'pull_request' && github.event.pull_request.head.repo.owner.login == 'apify') ||
-        (github.event_name == 'push' && github.ref == 'refs/heads/master') ||
-        github.event_name == 'workflow_dispatch'
+        inputs.run_tests && (
+          (github.event_name == 'pull_request' && github.event.pull_request.head.repo.owner.login == 'apify') ||
+          (github.event_name == 'push' && github.ref == 'refs/heads/master') ||
+          github.event_name == 'workflow_dispatch'
+        )
       }}
 
     strategy:
@@ -85,9 +130,11 @@ jobs:
 
     if: >-
       ${{
-        (github.event_name == 'pull_request' && github.event.pull_request.head.repo.owner.login == 'apify') ||
-        (github.event_name == 'push' && github.ref == 'refs/heads/master') ||
-        github.event_name == 'workflow_dispatch'
+        inputs.run_tests && (
+          (github.event_name == 'pull_request' && github.event.pull_request.head.repo.owner.login == 'apify') ||
+          (github.event_name == 'push' && github.ref == 'refs/heads/master') ||
+          github.event_name == 'workflow_dispatch'
+        )
       }}
 
     strategy:
@@ -137,3 +184,33 @@ jobs:
           token: ${{ env.CODECOV_TOKEN }}
           files: coverage-e2e.xml
           flags: e2e
+
+  package_check:
+    name: Package check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Set up uv package manager
+        uses: astral-sh/setup-uv@v8.1.0
+        with:
+          python-version: "3.14"
+
+      - name: Build sdist and wheel
+        run: uv run poe build
+
+      - name: Verify built package
+        uses: apify/actions/python-package-check@v1.1.0
+        with:
+          package_name: apify
+          dist_dir: dist
+          python_version: "3.14"
+          smoke_code: |
+            from apify import Actor, Configuration, ProxyConfiguration
+            Configuration()
+            ProxyConfiguration()
+
+  doc_check:
+    name: Doc check
+    uses: apify/workflows/.github/workflows/python_docs_check.yaml@main
diff --git a/.github/workflows/manual_release_beta.yaml b/.github/workflows/manual_release_beta.yaml
index a2c5cbbc..d1fe6dde 100644
--- a/.github/workflows/manual_release_beta.yaml
+++ b/.github/workflows/manual_release_beta.yaml
@@ -16,8 +16,22 @@ permissions:
   contents: read
 
 jobs:
+  wait_for_checks:
+    # Gate the release on the `Checks` workflow already succeeding on this commit (run by `on_master.yaml`).
+    name: Wait for required checks
+    runs-on: ubuntu-latest
+    permissions:
+      checks: read
+    steps:
+      - name: Wait for checks
+        uses: apify/actions/wait-for-checks@v1.2.0
+        with:
+          ref: ${{ github.sha }}
+          check-regexp: '^Checks'
+
   release_prepare:
     name: Release prepare
+    needs: [wait_for_checks]
     runs-on: ubuntu-latest
     outputs:
       version_number: ${{ steps.release_prepare.outputs.version_number }}
@@ -82,5 +96,6 @@ jobs:
       contents: write
       pages: write
       id-token: write
+      checks: read
     uses: ./.github/workflows/manual_release_docs.yaml
     secrets: inherit
diff --git a/.github/workflows/manual_release_docs.yaml b/.github/workflows/manual_release_docs.yaml
index 9c4735e1..43bdd498 100644
--- a/.github/workflows/manual_release_docs.yaml
+++ b/.github/workflows/manual_release_docs.yaml
@@ -23,9 +23,19 @@ jobs:
       contents: write
       pages: write
       id-token: write
+      checks: read
     runs-on: ubuntu-latest
 
     steps:
+      # Gate manual dispatches on the `Checks` workflow already succeeding on this commit (run by `on_master.yaml`);
+      # skipped when called from another workflow.
+      - name: Wait for checks
+        if: github.event_name == 'workflow_dispatch'
+        uses: apify/actions/wait-for-checks@v1.2.0
+        with:
+          ref: ${{ github.sha }}
+          check-regexp: '^Checks'
+
       - name: Checkout repository
         uses: actions/checkout@v6
         with:
diff --git a/.github/workflows/manual_release_stable.yaml b/.github/workflows/manual_release_stable.yaml
index 4d773da5..99e38322 100644
--- a/.github/workflows/manual_release_stable.yaml
+++ b/.github/workflows/manual_release_stable.yaml
@@ -29,13 +29,22 @@ permissions:
   contents: read
 
 jobs:
-  code_checks:
-    name: Code checks
-    uses: ./.github/workflows/_check_code.yaml
+  wait_for_checks:
+    # Gate the release on the `Checks` workflow already succeeding on this commit (run by `on_master.yaml`).
+    name: Wait for required checks
+    runs-on: ubuntu-latest
+    permissions:
+      checks: read
+    steps:
+      - name: Wait for checks
+        uses: apify/actions/wait-for-checks@v1.2.0
+        with:
+          ref: ${{ github.sha }}
+          check-regexp: '^Checks'
 
   release_prepare:
     name: Release prepare
-    needs: [code_checks]
+    needs: [wait_for_checks]
     runs-on: ubuntu-latest
     outputs:
       version_number: ${{ steps.release_prepare.outputs.version_number }}
@@ -118,6 +127,7 @@ jobs:
     needs: [release_prepare, changelog_update, pypi_publish]
     permissions:
       contents: write
+      checks: read
     uses: ./.github/workflows/manual_version_docs.yaml
     with:
       # Pass the bumped version explicitly — the job's checkout uses the dispatch ref (pre-bump),
@@ -132,6 +142,7 @@ jobs:
       contents: write
       pages: write
       id-token: write
+      checks: read
     uses: ./.github/workflows/manual_release_docs.yaml
     secrets: inherit
 
diff --git a/.github/workflows/manual_version_docs.yaml b/.github/workflows/manual_version_docs.yaml
index c400c72d..636c4748 100644
--- a/.github/workflows/manual_version_docs.yaml
+++ b/.github/workflows/manual_version_docs.yaml
@@ -36,12 +36,22 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      checks: read
 
     defaults:
       run:
         working-directory: website
 
     steps:
+      # Gate manual dispatches on the `Checks` workflow already succeeding on this commit (run by `on_master.yaml`);
+      # skipped when called from another workflow.
+      - name: Wait for checks
+        if: github.event_name == 'workflow_dispatch'
+        uses: apify/actions/wait-for-checks@v1.2.0
+        with:
+          ref: ${{ github.sha }}
+          check-regexp: '^Checks'
+
       - name: Checkout repository
         uses: actions/checkout@v6
         with:
diff --git a/.github/workflows/on_master.yaml b/.github/workflows/on_master.yaml
index 0bd60fa0..ac7d7f8b 100644
--- a/.github/workflows/on_master.yaml
+++ b/.github/workflows/on_master.yaml
@@ -11,33 +11,27 @@ permissions:
   contents: read
 
 jobs:
-  doc_checks:
-    name: Doc checks
-    uses: ./.github/workflows/_check_docs.yaml
+  checks:
+    name: Checks
+    uses: ./.github/workflows/_checks.yaml
+    with:
+      # Skip the test suites for docs-only commits — they don't change runtime behavior.
+      run_tests: ${{ !startsWith(github.event.head_commit.message, 'docs') }}
+    secrets: inherit
 
   doc_release:
     # Skip this for non-"docs" commits.
     if: startsWith(github.event.head_commit.message, 'docs')
     name: Doc release
-    needs: [doc_checks]
+    needs: [checks]
     permissions:
       contents: write
       pages: write
       id-token: write
+      checks: read
     uses: ./.github/workflows/manual_release_docs.yaml
     secrets: inherit
 
-  code_checks:
-    name: Code checks
-    uses: ./.github/workflows/_check_code.yaml
-
-  tests:
-    # Skip this for "docs" commits.
-    if: "!startsWith(github.event.head_commit.message, 'docs')"
-    name: Tests
-    uses: ./.github/workflows/_tests.yaml
-    secrets: inherit
-
   # The beta release is dispatched as a separate workflow run (instead of calling `manual_release_beta.yaml` via `uses:`)
   # because PyPI's Trusted Publishing does not currently support reusable workflows.
   # See: https://docs.pypi.org/trusted-publishers/troubleshooting/#reusable-workflows-on-github
@@ -50,7 +44,7 @@ jobs:
       startsWith(github.event.head_commit.message, 'refactor') ||
       startsWith(github.event.head_commit.message, 'style')
     name: Beta release
-    needs: [code_checks, tests]
+    needs: [checks]
     runs-on: ubuntu-latest
     permissions:
       actions: write # Required by execute-workflow.
diff --git a/.github/workflows/on_pull_request.yaml b/.github/workflows/on_pull_request.yaml
index 991dabaa..0ea3d27d 100644
--- a/.github/workflows/on_pull_request.yaml
+++ b/.github/workflows/on_pull_request.yaml
@@ -17,19 +17,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-  doc_checks:
-    name: Doc checks
-    uses: ./.github/workflows/_check_docs.yaml
-
-  code_checks:
-    name: Code checks
-    uses: ./.github/workflows/_check_code.yaml
-
-  package_check:
-    name: Package check
-    uses: ./.github/workflows/_check_package.yaml
-
-  tests:
-    name: Tests
-    uses: ./.github/workflows/_tests.yaml
+  checks:
+    name: Checks
+    uses: ./.github/workflows/_checks.yaml
     secrets: inherit