Update CI

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"

.github/workflows/ci.yml

@@ -12,6 +12,7 @@ on:
       - "!*pre*"
       - "!*post*"
   pull_request:
+  # Allow manual runs through the web UI
   workflow_dispatch:
   schedule:
     #        ┌───────── minute (0 - 59)
@@ -36,16 +37,15 @@ jobs:
         - pandoc
         - graphviz
       envs: |
-        - linux: py312-sphinx8
+        - linux: py313-sphinx8
     secrets:
       CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
-  tests:
+  test:
     needs: [core]
     uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@main
     with:
       submodules: false
-      coverage: codecov
       libraries: |
         brew:
             - pandoc
@@ -57,16 +57,27 @@ jobs:
             - pandoc
             - graphviz
       envs: |
-        - macos: py311-sphinx7
-        - windows: py310-sphinx7
-        - linux: py310-sphinx6
+        - macos: py312-sphinx8
+        - windows: py311-sphinx8
+        - linux: py310-sphinx8
         - linux: py312-pydata-sphinx-theme
-        - linux: py312-devdeps
-    secrets:
-      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+        - linux: py313-devdeps
+
+  extra_tests:
+    needs: [test]
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@main
+    with:
+      submodules: false
+      libraries: |
+        apt:
+            - pandoc
+            - graphviz
+      envs: |
+        - linux: py312-pydata-sphinx-theme
+        - linux: py313-devdeps
 
-  extras:
-    needs: [tests]
+  docs:
+    needs: [core]
     uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@main
     with:
       submodules: false
@@ -76,12 +87,23 @@ jobs:
             - pandoc
             - graphviz
       envs: |
-        - linux: py312-docs
-        - linux: pydata-sphinx-theme-dev
-        - linux: py312-linkcheck
+        - linux: py313-docs
+        - linux: py313-linkcheck
+
+  sdist_verify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: python -m pip install -U --user build
+      - run: python -m build . --sdist
+      - run: python -m pip install -U --user twine
+      - run: python -m twine check dist/*
 
   conda:
-    needs: [tests]
+    needs: [test]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -90,16 +112,34 @@ jobs:
           lfs: true
       - uses: conda-incubator/setup-miniconda@v3
         with:
-          activate-environment: ablog-test
-          environment-file: ablog-conda-test-env.yml
+          activate-environment: sunpy-test
+          environment-file: sunpy-dev-env.yml
           python-version: "3.12"
-      - name: Install ablog
+      - name: Install sunpy
         shell: bash -el {0}
         run: |
           pip install --no-deps --no-build-isolation .
       - name: Run test
         shell: bash -el {0}
         run: |
           conda list
+          cd /tmp
           pytest -vvv -r a --pyargs ablog
           make tests
+
+  publish:
+    # Build wheels on PRs only when labelled. Releases will only be published if tagged ^v.*
+    # see https://github-actions-workflows.openastronomy.org/en/latest/publish.html#upload-to-pypi
+    if: |
+      github.event_name != 'pull_request' ||
+      (
+        github.event_name == 'pull_request' &&
+        contains(github.event.pull_request.labels.*.name, 'Run publish')
+      )
+    needs: [test, docs, sdist_verify]
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish_pure_python.yml@main
+    with:
+      python-version: "3.13"
+      submodules: false
+    secrets:
+      pypi_token: ${{ secrets.PYPI_TOKEN }}