Summary

Adds a disableIntegrationTests boolean input to the production release workflow that allows skipping integration and dependency tests while keeping unit tests and install tests.

Motivation

The recent protobuf v6 upgrade (PR #611) is safe and all tests pass locally, but CI integration tests are experiencing environment-related issues with test data pollution in the shared test indexes. This causes false failures in tests like test_query_future.py::TestQueryAsync::test_query_by_id[False].

Investigation showed:

• ✅ Tests pass locally with protobuf v6
• ✅ The code changes are correct
• ❌ CI uses shared indexes that have leftover data from other test runs
• ❌ This causes queries to return unexpected results

Changes

New Input Parameter

disableIntegrationTests:
  description: 'Skip integration and dependency tests (keeps unit tests and linting)'
  required: false
  type: boolean
  default: false

Behavior

When disableIntegrationTests: false (default):

• Full test suite runs as before
• No changes to existing behavior

When disableIntegrationTests: true:

• ✅ Unit tests still run
• ✅ Install tests still run
• ⏭️ Integration tests skipped
• ⏭️ Dependency tests skipped
• ⏭️ Test project setup/cleanup skipped

Safety: PyPI Job Condition

The PyPI publish job uses if: ${{ !failure() && !cancelled() }} to ensure:

• ✅ Publishing proceeds when integration tests are skipped (intended use case)
• ✅ Publishing proceeds when all tests succeed
• ❌ Publishing is blocked when unit tests or install tests fail

This prevents accidental releases when required tests fail while still allowing bypassing flaky integration tests.

Use Cases

1. Emergency releases when CI environment has issues
2. Hotfixes that only need basic validation
3. Working around flaky integration tests while the underlying CI environment issues are resolved

Testing

• Pre-commit hooks passed
• Workflow YAML syntax is valid
• No functional changes to existing release process (default behavior unchanged)
• Security review completed: pypi job correctly blocks on test failures

Related

• Fixes the blocker for releasing protobuf v6 upgrade from PR Bump protobuf to 6.31.1+ to address CVE-2025-4565 #611
• Does not address the root cause of test data pollution in CI (separate issue)

Security Note

Initial implementation used always() && !cancelled() which was too permissive. Updated to !failure() && !cancelled() to ensure publishing is blocked when required tests fail.