Update cd.yml, add push to testpypi

.github/workflows/cd.yml

@@ -2,7 +2,6 @@ name: CD
 
 on:
   workflow_dispatch:
-  pull_request:
   push:
     branches:
       - main
@@ -15,8 +14,6 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  # Many color libraries just need this to be set to any value, but at least
-  # one distinguishes color depth, where "3" -> "256-bit color".
   FORCE_COLOR: 3
 
 jobs:
@@ -29,10 +26,61 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: hynek/build-and-inspect-python-package@v2
+      - name: Build sdist and wheel
+        run: pipx run build
 
-  publish:
+      - uses: actions/upload-artifact@v4
+        with:
+          path: dist
+
+      - name: Check products
+        run: pipx run twine check dist/*
+
+  test-built-dist:
     needs: [dist]
+    name: Test built distribution
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/[email protected]
+        name: Install Python
+        with:
+          python-version: "3.10"
+      - uses: actions/download-artifact@v4
+        with:
+          name: artifact
+          path: dist
+      - name: List contents of built dist
+        run: |
+          ls -ltrh
+          ls -ltrh dist
+      - name: Publish to Test PyPI
+        uses: pypa/[email protected]
+        with:
+          repository-url: https://test.pypi.org/legacy/
+          verbose: true
+          skip-existing: true
+      - name: Check pypi packages
+        run: |
+          sleep 3
+          python -m pip install --upgrade pip
+
+          echo "=== Testing wheel file ==="
+          # Install wheel to get dependencies and check import
+          python -m pip install --extra-index-url https://test.pypi.org/simple --upgrade --pre prospecpy
+          python -c "import prospecpy; print(prospecpy.__version__)"
+          echo "=== Done testing wheel file ==="
+
+          echo "=== Testing source tar file ==="
+          # Install tar gz and check import
+          python -m pip uninstall --yes prospecpy
+          python -m pip install --extra-index-url https://test.pypi.org/simple --upgrade --pre --no-binary=prospecpy prospecpy
+          python -c "import prospecpy; print(prospecpy.__version__)"
+          echo "=== Done testing source tar file ==="
+
+  publish:
+    needs: [dist, test-built-dist]
     name: Publish to PyPI
     environment: pypi
     permissions:
@@ -43,11 +91,8 @@ jobs:
     steps:
       - uses: actions/download-artifact@v4
         with:
-          name: Packages
+          name: artifact
           path: dist
 
-      - uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          # Remember to tell (test-)pypi about this repo before publishing
-          # Remove this line to publish to PyPI
-          repository-url: https://test.pypi.org/legacy/
+      - uses: pypa/[email protected]
+        if: startsWith(github.ref, 'refs/tags')