diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index 45783b0..54e062b 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -3,7 +3,15 @@
 
 name: Python
 
-on: [push, pull_request]
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+
+# Drop permissions to minimum for security
+permissions:
+  contents: read
 
 jobs:
   build:
@@ -11,12 +19,12 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: [3.8, 3.9, "3.10", "3.11"]
+        python-version: [3.9, "3.10", "3.11", "3.12"]
 
     steps:
       - uses: actions/checkout@v4
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies
diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 659d7e9..737cc1d 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -1,10 +1,18 @@
+0.1.11
+~~~~~~
+
+- Include 3.12 in tests and omit 3.8
+  `pull#69 <https://github.com/peterbe/django-cache-memoize/pull/69>`
+
 0.1.10
+~~~~~~
 
 - Support for Django 3.2
   `pull#51 <https://github.com/peterbe/django-cache-memoize/pull/51>`
   Thanks @UsamaSadiq
 
 0.1.9
+~~~~~
 
 - Fix potential problem with default cache key generation (sort order,
   possible identical key, quoting of paramters with ``=`` sign in string)
diff --git a/tox.ini b/tox.ini
index 9fcd94e..7161aaf 100644
--- a/tox.ini
+++ b/tox.ini
@@ -3,17 +3,17 @@ envlist =
     lint-py311,
     readme-py311,
     docs-py311,
-    py38-django{32,41,42},
     py39-django{32,41,42},
     py310-django{32,41,42},
     py311-django{41,42},
+    py312-django{41,42},
 
 [gh-actions]
 python =
-    3.8: py38
     3.9: py39
     3.10: py310
     3.11: py311, lint, restlint
+    3.12: py312
 
 [testenv]
 usedevelop = true