ci: refactor CI/CD pipeline into separate workflows

- Split semantic-release and publish workflows for better separation of concerns
- semantic-release.yml: handles testing and automated version bumping on branch pushes
- publish.yml: handles PyPI publication on stable release tags (v[0-9]+.[0-9]+.[0-9]+)
- Add workflow_dispatch to publish.yml for manual publication of any tag
- Eliminates double-execution issue by using git-native tag triggers instead of text matching
- Supports both automatic releases and manual on-demand publishing

Author: LittleCoinCoin

.github/workflows/publish.yml

@@ -0,0 +1,82 @@
+name: Publish to PyPI
+
+on:
+  push:
+    tags:
+      - 'v[0-9]+.[0-9]+.[0-9]+*'
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Git tag to publish (e.g., v1.0.0)'
+        required: true
+        type: string
+      ref:
+        description: 'Branch or commit to checkout'
+        required: false
+        default: 'main'
+        type: string
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ref: ${{ github.event.inputs.ref || github.ref }}
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install Python dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e .
+
+      - name: Run import test
+        run: |
+          python -c "import hatch; print('Hatch package imports successfully')"
+
+  publish-pypi:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    needs: test
+    environment:
+      name: pypi
+      url: https://pypi.org/project/hatch-xclam/
+    permissions:
+      id-token: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ref: ${{ github.event.inputs.ref || github.ref }}
+
+      - name: Checkout specific tag for manual dispatch
+        if: github.event_name == 'workflow_dispatch'
+        run: git checkout ${{ github.event.inputs.tag }}
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install Python dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install build
+
+      - name: Build Python Package
+        run: python -m build
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          print-hash: true
+          verbose: true
+          skip-existing: true

.github/workflows/semantic-release.yml

@@ -32,11 +32,6 @@ jobs:
   release:
     needs: test
     runs-on: ubuntu-latest
-    if: github.event_name == 'push'
-    outputs:
-      released: ${{ steps.release.outputs.released }}
-      version: ${{ steps.release.outputs.version }}
-      tag: ${{ steps.release.outputs.tag }}
     steps:
       - name: Generate GitHub App Token
         id: generate_token
@@ -70,41 +65,3 @@ jobs:
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
           npx semantic-release
-
-      - name: Build Python Package
-        if: success()
-        run: |
-          python -m pip install build
-          python -m build
-
-      - name: Upload Build Artifacts
-        if: success()
-        uses: actions/upload-artifact@v4
-        with:
-          name: dist-package
-          path: dist/
-          retention-days: 30
-
-  publish-pypi:
-    name: Publish to PyPI
-    runs-on: ubuntu-latest
-    needs: [test, release]
-    if: success() && github.event_name == 'push'
-    environment:
-      name: pypi
-      url: https://pypi.org/project/hatch-xclam/
-    permissions:
-      id-token: write
-
-    steps:
-      - name: Download Build Artifacts
-        uses: actions/download-artifact@v4
-        with:
-          name: dist-package
-          path: dist/
-
-      - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          print-hash: true
-          verbose: true