ci: manual job to block pipeline start

.gitlab/ci/common.yml

@@ -2,6 +2,7 @@
 # Default Variables #
 #####################
 stages:
+  - manual_gate
   - upload_cache
   - pre_check
   - build

.gitlab/ci/deploy.yml

@@ -7,8 +7,10 @@
   stage: deploy
   tags: [ fast_run, shiny ]
   image: python:3.13-slim
-  dependencies: []
-  needs: []
+  needs:
+    - job: manual_gate
+      optional: true
+  dependencies: null
   variables:
     PIP_CACHE_DIR: ".cache/pip"
     # Metrics - related env vars

.gitlab/ci/host-test.yml

@@ -325,7 +325,9 @@ build_docker:
     - .before_script:minimal
     - .rules:build:docker
   stage: host_test
-  needs: []
+  needs:
+    - job: manual_gate
+      optional: true
   image: espressif/docker-builder:1
   tags: [shiny, dind]
   variables:

.gitlab/ci/integration_test.yml

@@ -40,7 +40,9 @@ gen_integration_pipeline:
     GIT_STRATEGY: "fetch"
     SUBMODULES_TO_FETCH: "none"
     GIT_LFS_SKIP_SMUDGE: 1
-  needs: []
+  needs:
+    - job: manual_gate
+      optional: true
   artifacts:
     paths:
       - idf-integration-ci/child_pipeline/

.gitlab/ci/manual_gate.yml

@@ -0,0 +1,11 @@
+manual_gate:
+  stage: manual_gate
+  image: $ESP_ENV_IMAGE
+  tags: [fast_run, shiny]
+  allow_failure: false
+  rules:
+    - if: '($CI_COMMIT_REF_NAME == "master" || $CI_COMMIT_BRANCH =~ /^release\/v/) && $CI_PIPELINE_SOURCE == "push"'
+      when: manual
+    - when: never
+  script:
+    - echo "Manual approval received for master pipeline."

.gitlab/ci/test-win.yml

@@ -94,7 +94,9 @@ pytest_build_system_win:
     - .test_build_system_template_win
     - .rules:labels:windows_pytest_build_system
   parallel: 6
-  needs: []
+  needs:
+    - job: manual_gate
+      optional: true
   tags: [windows-build, brew]
   artifacts:
     paths:
@@ -109,7 +111,9 @@ pytest_build_system_win_minimal_cmake:
   extends:
     - .test_build_system_template_win
     - .rules:labels:windows_pytest_build_system
-  needs: []
+  needs:
+    - job: manual_gate
+      optional: true
   tags: [windows-build, brew]
   artifacts:
     paths:
@@ -142,7 +146,9 @@ pytest_buildv2_system_win:
     - .test_build_system_template_win
     - .rules:labels:buildv2
   parallel: 2
-  needs: []
+  needs:
+    - job: manual_gate
+      optional: true
   tags: [windows-build, brew]
   artifacts:
     paths: