fix: test and publish workflows

Author: sscovil

.github/workflows/publish.yml

@@ -1,31 +1,22 @@
-name: Upload Python Package
+name: Publish to PyPI
 
 on:
   release:
     types: [published]
 
 jobs:
+  test:
+    uses: sscovil/python-dev-cli/.github/workflows/test.yml@main
   publish:
+    if: github.repository == 'sscovil/python-dev-cli'
+    needs: [test]
     runs-on: ubuntu-latest
-    environment: production
+    environment:
+      name: pypi
+      url: https://pypi.org/p/sscovil/python-dev-cli
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
     steps:
       - uses: actions/checkout@v3
-      - name: Set up Python
-        uses: actions/setup-python@v4
-        with:
-          python-version: '3.x'
-      - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip
-          python -m pip install ".[dev]"
-      - name: Run tests
-        run: |
-          dev lint
-          dev test
-      - name: Build package
-        run: python -m build --sdist --wheel
       - name: Publish package
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_DEPLOYMENT_TOKEN }}

.github/workflows/test.yml

@@ -0,0 +1,29 @@
+name: Build & Test
+
+on:
+  push:
+  workflow_dispatch:  # Allows manually triggering this workflow from the Actions tab
+  workflow_call:  # Allows other workflows to trigger this workflow
+
+jobs:
+  test:
+    if: github.repository == 'sscovil/python-dev-cli'
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ ubuntu-latest, macos-latest, windows-latest ]
+        python-version: ["3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v3
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install ".[dev]"
+      - name: Run tests
+        run: |
+          dev lint
+          dev test

.gitignore

@@ -158,3 +158,6 @@ cython_debug/
 #  and can be added to the global gitignore or merged into this file.  For a more nuclear
 #  option (not recommended) you can uncomment the following to ignore the entire idea folder.
 #.idea/
+
+# setuptools_scm
+_version.py

CHANGELOG.md

@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/) and this project adheres to
 [Semantic Versioning](http://semver.org/).
 
+## [1.0.4] - 2023-09-25
+
+### Added
+
+- Separate tests into a different GitHub Actions workflow, for running tests on pull requests
+
+### Changed
+
+- Modify `publish` GitHub Actions workflow to only run on release, using PyPI trusted publishing
+- Modify `test` GitHub Actions workflow to test multiple operating systems and Python versions
+
+### Fixed
+
+- Add `_version.py` to `.gitignore` ensure `setuptools_scm` updates that file correctly
+
 ## [1.0.3] - 2023-09-24
 
 ### Fixed