diff --git a/.github/workflows/enforce-pr-checklist.yml b/.github/workflows/enforce-pr-checklist.yml
index b96d15a80..37cbdbc5a 100644
--- a/.github/workflows/enforce-pr-checklist.yml
+++ b/.github/workflows/enforce-pr-checklist.yml
@@ -4,6 +4,9 @@ on:
   pull_request:
     types: [opened, edited, synchronize]
 
+permissions:
+  pull-requests: read
+
 jobs:
   verify-pr-checklist:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/github-actions.yml b/.github/workflows/github-actions.yml
index 62f7ae53e..6e5d63770 100644
--- a/.github/workflows/github-actions.yml
+++ b/.github/workflows/github-actions.yml
@@ -74,6 +74,18 @@ jobs:
             python_arch: 'x64'
             tox_env: 'py312'
             os: 'ubuntu-latest'
+          - name: 'py313 (ubuntu)'
+            python: '3.13'
+            toxpython: 'python3.13'
+            python_arch: 'x64'
+            tox_env: 'py313'
+            os: 'ubuntu-latest'
+#          - name: 'py314 (ubuntu)'
+#            python: '3.14'
+#            toxpython: 'python3.14'
+#            python_arch: 'x64'
+#            tox_env: 'py314'
+#            os: 'ubuntu-latest'
 #          - name: 'pypy38 (ubuntu)'
 #            python: 'pypy-3.8'
 #            toxpython: 'pypy3.8'
@@ -201,7 +213,7 @@ jobs:
         done
 
     - name: upload artifact
-      uses: actions/upload-pages-artifact@v4
+      uses: actions/upload-pages-artifact@v5
 
     - name: deploy to GitHub Pages
       id: deployment
diff --git a/tox.ini b/tox.ini
index 320d5c6a9..9a90e84dc 100644
--- a/tox.ini
+++ b/tox.ini
@@ -28,6 +28,8 @@ basepython =
     py310: {env:TOXPYTHON:python3.10}
     py311: {env:TOXPYTHON:python3.11}
     py312: {env:TOXPYTHON:python3.12}
+    py313: {env:TOXPYTHON:python3.13}
+    py314: {env:TOXPYTHON:python3.14}
     {bootstrap,clean,check,report,docs,coveralls}: {env:TOXPYTHON:python3}
 setenv =
     PYTHONPATH={toxinidir}/tests