ci: Restore steps performed only for releases

Also add a new step that runs unconditionally and requires that all of
the cibuildwheel steps have succeeded, so that we can add just one
required status check instead of N.

Signed-off-by: Matt Wozniski <mwozniski@bloomberg.net>

Author: godlygeek

.github/workflows/build_wheels.yml

@@ -133,9 +133,21 @@ jobs:
           name: macosx_${{ matrix.cibw_arch }}-wheels
           path: ./wheelhouse/*.whl
 
+  build_and_test_wheels:
+    name: Build and test wheels
+    needs: [build_linux_wheels, build_macosx_wheels]
+    runs-on: ubuntu-latest
+    steps:
+      # We can't make a matrix job itself a required check in GitHub,
+      # so we instead add a job that depends on the two matrix jobs,
+      # and we mark this job as required instead. This job doesn't do
+      # any work, it just lets us better manage our required checks.
+      - run: echo "Done!"
+
   upload_pypi:
-    needs: [build_linux_wheels, build_macosx_wheels, build_sdist]
+    needs: [build_and_test_wheels, build_sdist]
     runs-on: ubuntu-latest
+    if: github.event_name == 'release' && github.event.action == 'published'
     steps:
       - uses: actions/download-artifact@v4
         with:
@@ -146,7 +158,11 @@ jobs:
           mv dist/*-wheels/*.whl dist/
           rmdir dist/{sdist,*-wheels}
           rm -r dist/tests
-      - run: ls -R dist
+          ls -R dist
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          skip_existing: true
+          password: ${{ secrets.PYPI_PASSWORD }}
 
   publish_docs:
     name: Publish docs