BUILD-11264 chore: upgrade gh-action_release to v7 (master)

[julien-carsique-sonarsource]

Part of BUILD-11249.

Changes

• Migrate trigger from release: published to workflow_dispatch with version input
• Upgrade gh-action_release reference to @master (v7 dogfood)
• Add isDummyProject: true

[sonar-review-alpha]

Summary

This PR migrates the release workflow from automatic (GitHub release event) to manual (workflow_dispatch), allowing explicit control over version and PyPI destination. It upgrades gh-action_release to @master (v7 in development) and marks this as a dummy project for testing the new action version. This represents a shift from passive to active release triggering, where the version must be explicitly provided as an input rather than derived from the release event.

Key behavioral changes:

• Release no longer auto-triggers on publishing a GitHub release
• version is now a required manual input
• Test PyPI publishing is now explicitly opted-in (defaults to false) rather than inferred from prerelease status
• The action reference changed from stable v6 to the development master branch

What reviewers should know

Start here: Review the trigger change in lines 2-13. The workflow now requires manual invocation with explicit version input instead of auto-triggering on release events.

Key decision: The @master reference (line 23, dogfood comment) means this PR is testing an unreleased version of gh-action_release — this is intentional for validating v7 before general availability.

Watch for: The logic inversion on line 25 — publishToPyPI now uses !inputs.publishToTestPyPI (publish to production when NOT publishing to test), which is clearer than the previous prerelease-based logic but represents a semantic shift in how test releases are controlled.

Testing context: isDummyProject: true (line 27) is already present and indicates this is a low-risk test case. Verify the manual inputs work as expected in the workflow dispatch UI before deploying to production workflows.

---

• Generate Walkthrough
• Generate Diagram

🗣️ Give feedback

[hashicorp-vault-sonar-prod]

BUILD-11264

[Copilot]

Pull request overview

This PR updates the repository’s release workflow to use a manual workflow_dispatch trigger with an explicit version input, while dogfooding SonarSource/gh-action_release v7 via @master and passing isDummyProject: true.

Changes:

• Switch release trigger from release: published to workflow_dispatch with a required version input.
• Update the reusable workflow reference from gh-action_release@v6 to @master (v7 dogfood).
• Adjust release inputs to pass version and always publish to PyPI while skipping Python releasability checks.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonar-review-alpha]

LGTM! ✅

🗣️ Give feedback