Publish the python library to TestPyPI and PyPI

- Github "Trusted Publisher" must be configured on TestPyPI & PyPI
- Like previously the publishing triggering to TestPyPI, PyPI or github release is manual
- an error will occur if the same version already exists on TestPyPI or PyPI

Author: Thierry RAMORASOAVINA

.github/workflows/pip.yml

@@ -3,14 +3,26 @@ name: Pip Package
 env:
   DEFAULT_SAMPLES_REVISION: 11.0.0
 on:
-  workflow_dispatch:
+  workflow_dispatch:  # manual triggering
     inputs:
       samples-revision:
         default: 11.0.0
         description: khiops-samples repo revision
       image-tag:
         default: 11.0.0-b.0.0
         description: Development Docker Image Tag
+      publish-to-github:
+        type: boolean
+        default: true
+        description: Legacy publishing mode - github release (PRODUCTION)
+      publish-to-testpypi:
+        type: boolean
+        default: false
+        description: TestPyPI publishing mode (TEST)
+      publish-to-pypi:
+        type: boolean
+        default: false
+        description: PyPI publishing mode (PRODUCTION)
   pull_request:
     paths:
       - setup.py
@@ -35,6 +47,7 @@ jobs:
       packages: read
     steps:
       - name: Checkout sources
+        # no explict branch specified so this step should check out the github.ref branch or tag
         uses: actions/checkout@v4
         with:
           # Get Git tags so that versioneer can function correctly
@@ -51,13 +64,15 @@ jobs:
           # Install required Python build dependency
           pip install build
 
-          # Build the package
-          python3 -m build --sdist
-      - name: Upload package as artifact
+          # Build the packages/distributions :
+          # a source distribution is built first (sdist) and 
+          # a binary one (wheel) then
+          python3 -m build
+      - name: Upload the packages as artifact
         uses: actions/upload-artifact@v4
         with:
-          name: pip-package
-          path: ./dist/khiops*.tar.gz
+          name: pip-packages
+          path: ./dist/
   test:
     needs: build
     runs-on: ubuntu-22.04
@@ -83,14 +98,14 @@ jobs:
           ref: ${{ env.SAMPLES_REVISION }}
           token: ${{ secrets.GITHUB_TOKEN }}
           path: khiops-samples
-      - name: Download package artifact
+      - name: Download package artifacts
         uses: actions/download-artifact@v4
         with:
-          name: pip-package
+          name: pip-packages
       - name: Install package
         run: |
           pip install --upgrade pip
-          pip install $(ls khiops*.tar.gz)
+          pip install $(ls khiops*.tar.gz)  # install the source package
       - name: Run tests
         env:
           KHIOPS_SAMPLES_DIR: ${{ github.workspace }}/khiops-samples
@@ -120,17 +135,19 @@ jobs:
           # (as given by khiops_env)
           kh-status | grep "MPI command" | grep -vwq "<empty>"
   release:
-    if: github.ref_type == 'tag'
+    if: github.ref_type == 'tag'  # only publish on tag pushes
     needs: [build, test]
     runs-on: ubuntu-22.04
     permissions:
       contents: write
+      id-token: write  # IMPORTANT: mandatory for trusted publishing on TestPyPI and PyPI
     steps:
       - name: Download package artifact
         uses: actions/download-artifact@v4
         with:
-          name: pip-package
-      - name: Upload Pip package to the release
+          name: pip-packages
+      - name: Upload Pip source package to the github release (under condition)
+        if: inputs.publish-to-github
         uses: ncipollo/release-action@v1.15.0
         with:
           allowUpdates: true
@@ -140,3 +157,20 @@ jobs:
           makeLatest: false
           prerelease: true
           updateOnlyUnreleased: true
+      - name: Publish Python 🐍 distribution 📦 to TestPyPI (under condition)
+        if: inputs.publish-to-testpypi
+        env:  # required environment variables at step level
+          name: testpypi
+          url: https://test.pypi.org/p/khiops
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          verbose: true
+          repository-url: https://test.pypi.org/legacy/
+      - name: Publish Python 🐍 distribution 📦 to PyPI (under condition)
+        if: inputs.publish-to-pypi
+        env:  # required environment variables at step level
+          name: pypi
+          url: https://pypi.org/p/khiops
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          verbose: true