fix: skip renovate-validate on semantic release pushes

We're already made this change for `renovate_bot` jobs: we need to do
the same for `renovate_validate` jobs for the same reason: the image
doesn't exist until after the tag pipeline is run.

.gitlab-ci.yml

@@ -82,6 +82,19 @@ container_image_tagged:
 # Override the renovate_bot script to avoid what appears to be broken
 # master builds when renovate attempts to run before the new image
 # is build
+renovate_validate:
+  rules:
+    - if: '$CI_PIPELINE_SOURCE == "schedule"'
+      when: 'never'
+    - if: $RENOVATE_DISABLED == 'true' || $RENOVATE_DISABLED == '1'
+      when: never
+    # Avoid running Renovate when Semantic Release pushes the release commit directly to main branch
+    - if: "$CI_COMMIT_AUTHOR =~ /semantic-release-bot/ && $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH"
+      when: never
+    - if: '$CI_PIPELINE_SOURCE == "merge_request_event" || $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
+      exists:
+        - renovate.json
+
 renovate_bot:
   rules:
     # Renovate only ever runs on gitlab.com