diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index 79dbb5c..93f563a 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -13,13 +13,16 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     timeout-minutes: 10
-
+    strategy:
+      matrix:
+        python-version:
+          - 3.12.4
     steps:
-      - uses: actions/checkout@v2
-      - name: Set up Python 3.7
+      - uses: actions/checkout@v4
+      - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@v2
         with:
-          python-version: 3.7
+          python-version: ${{ matrix.python-version }}
 
       - name: Test install
         run: |
diff --git a/requirements.txt b/requirements.txt
index 2812d1d..5c9ee6f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,5 +1,5 @@
 distro>=1.7.0
 GitPython>=3.1.3
-requests>=2.32.0
+requests>=2.32.3
 rich>=9.2.0
 urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability