Update ci.

.github/workflows/ci.yml

@@ -156,8 +156,8 @@ jobs:
         python:
           # Use a recent version to avoid having common disconnects between
           # local development setups and CI.
-          - name: CPython 3.11
-            python-version: '3.11'
+          - name: CPython 3.12
+            python-version: '3.12'
         task:
           - name: Check Newsfragment
             run: |
@@ -250,7 +250,7 @@ jobs:
     - name: Set up Python
       uses: actions/setup-python@v4
       with:
-        python-version: 3.11
+        python-version: 3.12
 
     - name: Install dependencies
       run: |
@@ -264,7 +264,8 @@ jobs:
       run: python admin/check_tag_version_match.py "${{ github.ref }}"
 
     - name: Publish to PyPI - on tag
-      uses: pypa/gh-action-pypi-publish@a56da0b891b3dc519c7ee3284aff1fad93cc8598
+      # This was tag 1.9.0 on 2024-07-30
+      uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0
 
 
   coverage:
@@ -277,7 +278,7 @@ jobs:
     - uses: actions/setup-python@v4
       with:
         # Use latest Python, so it understands all syntax.
-        python-version: 3.11
+        python-version: 3.12
 
     - run: python -Im pip install --upgrade coverage[toml]