Update GitHub Action versions

.github/workflows/test.yml

@@ -4,11 +4,15 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - name: Install xvfb and pulseaudio
+      run: |
+          sudo apt update
+          sudo apt install -y xvfb pulseaudio
+    - uses: actions/checkout@v4
     - name: Set up Python 3.x
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v5
       with:
-        python-version: 3.x
+        python-version: '3.12'
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
@@ -21,18 +25,14 @@ jobs:
         flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics
         # stricter tests for mission critical code
         flake8 --count src test
-
-    - name: Install xvfb and pulseaudio
-      run: |
-          sudo apt-get install xvfb pulseaudio
     - name: Run tests under xvfb
       run: |
         export XDG_RUNTIME_DIR="$RUNNER_TEMP"
         pulseaudio -D --start
         xvfb-run --auto-servernum pytest
     - name: Cleanup xvfb pidx
       uses: bcomnes/cleanup-xvfb@v1
-    - uses: actions/upload-artifact@master
+    - uses: actions/upload-artifact@v4
       if: ${{ failure() }}
       with:
           name: failed-image

.github/workflows/wheels.yml

@@ -1,28 +1,28 @@
 name: "Build Wheels"
 
 on:
-  workflow_dispatch:
   push:
-  release:
-    types:
-    - published
+    branches:
+    - main
+    tags:
+    - 'v*.*.*'
 
 jobs:
   buildpackage:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v1
-    - uses: actions/setup-python@v2
+    - uses: actions/checkout@v4
+    - uses: actions/setup-python@v4
       with:
-        python-version: 3.8
+        python-version: 3.12
 
     - name: Install wheel and SDist requirements
       run: python -m pip install "setuptools>=42.0" wheel twine
 
     - name: Build SDist
       run: python setup.py sdist bdist_wheel
 
-    - uses: actions/upload-artifact@v2
+    - uses: actions/upload-artifact@v4
       with:
         path: |
             dist/*.tar.gz
@@ -33,13 +33,15 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
 
+    permissions:
+      id-token: write
+
+    environment: release
+
     steps:
-    - uses: actions/download-artifact@v2
+    - uses: actions/download-artifact@v4
       with:
         name: artifact
         path: dist
 
-    - uses: pypa/gh-action-pypi-publish@master
-      with:
-        user: __token__
-        password: ${{ secrets.pypi_password }}
+    - uses: pypa/[email protected]