ci(gitlab): remove testing against alpine linux and add tests against macos and windows

Author: 56kyle

{{cookiecutter.project_name}}/{% if cookiecutter.repository_provider == 'gitlab' %}.gitlab-ci.yml{% endif %}

@@ -111,11 +111,7 @@ test-python:
   parallel:
     matrix:
       - PYTHON_VERSION: ["3.9", "3.10", "3.11", "3.12", "3.13"]
-        OS_IMAGE: ["bookworm-slim"]
-      # Add cross-platform testing for latest Python version
-      - PYTHON_VERSION: ["3.13"]
-        OS_IMAGE: ["alpine", "bookworm-slim"]
-  image: ghcr.io/astral-sh/uv:latest-python$PYTHON_VERSION-$OS_IMAGE
+  image: ghcr.io/astral-sh/uv:latest-python$PYTHON_VERSION-bookworm-slim
   script:
     - uvx nox -s tests-python-${PYTHON_VERSION//.}
   after_script:
@@ -138,6 +134,64 @@ test-python:
     - ".coveragerc"
     - ".gitlab-ci.yml"
 
+# Cross-platform testing with macOS (GitLab.com SaaS runners)
+test-python-macos:
+  stage: test
+  <<: *on-merge-requests-and-main
+  tags:
+    - saas-macos-medium-m1
+  before_script:
+    - curl -LsSf https://astral.sh/uv/install.sh | sh
+    - export PATH="$PATH:$HOME/.cargo/bin"
+  script:
+    - uvx nox -s tests-python-3.13
+  artifacts:
+    reports:
+      junit: tests/results/*.xml
+      coverage_report:
+        coverage_format: cobertura
+        path: coverage.xml
+    paths:
+      - tests/results/
+      - coverage.xml
+    expire_in: 5 days
+  changes:
+    - "src/**/*.py"
+    - "tests/**/*.py"
+    - "noxfile.py"
+    - "pyproject.toml"
+    - ".coveragerc"
+    - ".gitlab-ci.yml"
+
+# Cross-platform testing with Windows (GitLab.com SaaS runners)
+test-python-windows:
+  stage: test
+  <<: *on-merge-requests-and-main
+  tags:
+    - saas-windows-medium-amd64
+  before_script:
+    - powershell -c "irm https://astral.sh/uv/install.ps1 | iex"
+    - $env:PATH += ";$env:USERPROFILE\.cargo\bin"
+  script:
+    - uvx nox -s tests-python-3.13
+  artifacts:
+    reports:
+      junit: tests/results/*.xml
+      coverage_report:
+        coverage_format: cobertura
+        path: coverage.xml
+    paths:
+      - tests/results/
+      - coverage.xml
+    expire_in: 5 days
+  changes:
+    - "src/**/*.py"
+    - "tests/**/*.py"
+    - "noxfile.py"
+    - "pyproject.toml"
+    - ".coveragerc"
+    - ".gitlab-ci.yml"
+
 {% if cookiecutter.add_rust_extension == 'y' -%}
 # Rust-specific jobs (conditional on rust extension flag)
 .rust-job: &rust-job
@@ -215,7 +269,22 @@ pages:
     - "noxfile.py"
     - "pyproject.toml"
 
-# Release Job (only on tags)
+# Test Release Job (TestPyPI)
+test-release-python:
+  stage: release
+  <<: *uv-cache
+  script:
+    - export PYPI_URL=https://test.pypi.org/legacy/
+    - uvx nox -s publish-python
+  after_script:
+    - uv cache prune --ci
+  rules:
+    - if: $CI_COMMIT_TAG
+  environment:
+    name: test
+    url: https://test.pypi.org/project/{{ cookiecutter.package_name }}/
+
+# Production Release Job (PyPI)
 release-python:
   stage: release
   <<: *uv-cache
@@ -228,3 +297,6 @@ release-python:
   environment:
     name: production
     url: https://pypi.org/project/{{ cookiecutter.package_name }}/
+  needs:
+    - test-release-python
+  when: manual