chore: nightly sync main into dev (12_05_2026)

.github/actions/action.yml

@@ -209,6 +209,8 @@ runs:
       if: always()
       env:
         IS_UNIT_TEST: ${{ inputs.is_unit_test == 'true' }}
+        MAIN_CONCLUSION: ${{ steps.run-main-script.conclusion }}
+        MAIN_EXIT_CODE: ${{ steps.run-main-script.outputs.exit_code }}
       run: |
         logs_report=logs-${{ inputs.test_case }}-${{ github.run_id }}-$(cat /proc/sys/kernel/random/uuid)
         echo "logs_report=$logs_report" | sed 's/\//-/g' | sed 's/\*/-/g' | tee -a "$GITHUB_OUTPUT"
@@ -219,8 +221,12 @@ runs:
         fi
         echo "coverage_report=$coverage_report" | tee -a "$GITHUB_OUTPUT"
 
-        EXIT_CODE=${{ steps.run-main-script.outputs.exit_code }}
-        IS_SUCCESS=$([[ "$EXIT_CODE" -eq 0 ]] && echo "true" || echo "false")
+        EXIT_CODE="${MAIN_EXIT_CODE:-${MAIN_CONCLUSION}}"
+        if [[ "$MAIN_CONCLUSION" == "success" ]]; then
+          IS_SUCCESS=true
+        else
+          IS_SUCCESS=false
+        fi
 
         if [[ "$IS_SUCCESS" == "false" && "${{ inputs.is-optional }}" == "true" ]]; then
           echo "::warning::Test failed but is marked optional — treating as success."

.github/workflows/_build_test_publish_wheel.yml

@@ -18,7 +18,7 @@ on:
         default: true
     secrets:
       TWINE_PASSWORD:
-        required: true
+        required: false
 
 jobs:
   build-and-test-wheels:
@@ -74,7 +74,7 @@ jobs:
             rm LICENSE || true
             docker run --rm -e NO_VCS_VERSION=1 -v $(pwd):/workspace -w /workspace $IMAGE bash -c '\
               for python_version in cp311 cp312 cp313; do \
-                /opt/python/${python_version}-${python_version}/bin/pip install --upgrade "setuptools<80.0.0,>=77.0.0" build; \
+                /opt/python/${python_version}-${python_version}/bin/pip install --upgrade "setuptools>=80" build; \
               done && \
               for python_version in cp311 cp312 cp313; do \
                 /opt/python/${python_version}-${python_version}/bin/python -m build; \
@@ -144,7 +144,8 @@ jobs:
   publish-wheels:
     needs: [build-and-test-wheels]
     runs-on: ubuntu-latest
-    if: inputs.no-publish == false
+    environment:
+      name: ${{ inputs.no-publish && 'public' || 'main' }}
     strategy:
       fail-fast: false
       matrix:
@@ -171,6 +172,7 @@ jobs:
           TWINE_PASSWORD: ${{ secrets.TWINE_PASSWORD }}
           TWINE_REPOSITORY: ${{ (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/heads/r')) && 'pypi' || 'testpypi' }}
           PLATFORM: ${{ matrix.PLATFORM }}
+          DRY_RUN: ${{ inputs.no-publish }}
         run: |
 
           # Delete sdist for arm64 since we already upload it with amd64.
@@ -180,9 +182,15 @@ jobs:
 
           ls -al dist/
           pip install twine
-          twine upload \
-            --verbose \
-            -r $TWINE_REPOSITORY \
-            -u $TWINE_USERNAME \
-            -p $TWINE_PASSWORD \
-            dist/*
+
+          if [[ "$DRY_RUN" == "false" ]]; then
+            [[ -z "$TWINE_PASSWORD" ]] && { echo "::error::TWINE_PASSWORD unset"; exit 1; }
+            twine upload \
+              --verbose \
+              -r $TWINE_REPOSITORY \
+              -u $TWINE_USERNAME \
+              -p $TWINE_PASSWORD \
+              dist/*
+          else
+            echo "[dry-run] would execute: twine upload --verbose -r $TWINE_REPOSITORY -u <user> -p <pass> dist/*"
+          fi