diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 091e575d..bbb3a68e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -180,20 +180,21 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python: ["3.7", "3.12"]
+        python: ["3.7", "3.13"]
 
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
-        name: Install Python ${{ matrix.python }}
-        with:
-          python-version: ${{ matrix.python }}
+      - uses: astral-sh/setup-uv@v3
+
+      - name: Setup environment
+        run: |
+          uv venv --python ${{ matrix.python }}
+          uv pip install pytest pytest-cov
 
       - name: Install dependencies
         run: |
           sudo apt-get update
           sudo apt-get install -y --no-install-recommends libssl-dev
-          pip install pytest pytest-cov
 
       - uses: actions/download-artifact@v4
         with:
@@ -204,12 +205,11 @@ jobs:
         env:
           CMAKE_ARGS: "-DBUILD_CMAKE_FROM_SOURCE:BOOL=OFF"
         run: |
-          pip -V
-          pip install dist/*.tar.gz
+          uv pip install dist/*.tar.gz
           rm -rf dist
 
       - name: Test installed SDist
-        run: pytest ./tests
+        run: .venv/bin/pytest ./tests
 
   check_dist:
     name: Check dist
@@ -248,3 +248,5 @@ jobs:
           subject-path: "dist/cmake-*"
 
       - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          attestations: true
diff --git a/.github/workflows/update-dependencies.yml b/.github/workflows/update-dependencies.yml
index 98bfed52..7e9db321 100644
--- a/.github/workflows/update-dependencies.yml
+++ b/.github/workflows/update-dependencies.yml
@@ -26,7 +26,7 @@ jobs:
           dependency_nice: "OpenSSL"
     steps:
     - uses: actions/checkout@v4
-    - uses: wntrblm/nox@2024.04.15
+    - uses: wntrblm/nox@2024.10.09
     - name: "Run update: bump ${{ matrix.dependency_nice }}"
       id: bump
       run: |