fix(publish): OIDC trusted publisher + workflow_dispatch inputs + v6 actions

Author: Coding-Dev-Tools

.github/workflows/publish.yml

@@ -4,6 +4,14 @@ on:
   release:
     types: [published]
   workflow_dispatch:
+    inputs:
+      pypi_target:
+        description: 'PyPI target (pypi or testpypi)'
+        default: 'pypi'
+        type: choice
+        options:
+          - pypi
+          - testpypi
 
 jobs:
   publish:
@@ -13,10 +21,10 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - name: Set up Python
-        uses: actions/setup-python@v5
+      - name: Set up Python 3.11
+        uses: actions/setup-python@v6
         with:
           python-version: "3.12"
 
@@ -31,5 +39,12 @@ jobs:
       - name: Check package
         run: twine check dist/*
 
+      - name: Publish to TestPyPI
+        if: ${{ inputs.pypi_target == 'testpypi' }}
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/
+
       - name: Publish to PyPI
+        if: ${{ inputs.pypi_target == 'pypi' || github.event_name == 'release' }}
         uses: pypa/gh-action-pypi-publish@release/v1