diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 7214246e..c54e1ef7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -7,6 +7,11 @@ on:
     branches: [ "master" ]
   workflow_dispatch:
 
+permissions:
+  contents: read
+  actions: read
+  checks: write
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
@@ -23,6 +28,9 @@ jobs:
           - py-version: '3.11'
             c-compiler: 'gcc'
             cxx-compiler: 'g++'
+          - py-version: '3.12'
+            c-compiler: 'gcc'
+            cxx-compiler: 'g++'
           - py-version: '3.10'
             c-compiler: 'clang'
             cxx-compiler: 'clang++'
@@ -74,7 +82,7 @@ jobs:
 
     - name: Install
       if: always()
-      run: python -m pip install wheel && python -m pip list && make install PIP_INSTALL_FLAGS="--no-use-pep517 -vvv"
+      run: python -m pip list && make install PIP_INSTALL_FLAGS="--no-use-pep517 -vvv"
 
     - name: Remove ccache cache
       if: ${{ steps.ccache-restore.outputs.cache-hit }}
diff --git a/.github/workflows/documentation-ci.yml b/.github/workflows/documentation-ci.yml
index 16bb50ad..3b8e0dc1 100644
--- a/.github/workflows/documentation-ci.yml
+++ b/.github/workflows/documentation-ci.yml
@@ -43,7 +43,7 @@ jobs:
         sudo apt-get install mpi-default-bin mpi-default-dev libmetis-dev libparmetis-dev libsuitesparse-dev ccache
 
     - name: Install Python dependencies
-      run: make prereq && make prereq-extra && python -m pip install wheel
+      run: make prereq && make prereq-extra
 
     - name: Install
       run: make dev
diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
index 15a83d9b..d6630533 100644
--- a/.github/workflows/documentation.yml
+++ b/.github/workflows/documentation.yml
@@ -44,7 +44,7 @@ jobs:
         sudo apt-get install mpi-default-bin mpi-default-dev libmetis-dev libparmetis-dev libsuitesparse-dev ccache
 
     - name: Install Python dependencies
-      run: make prereq && make prereq-extra && python -m pip install wheel
+      run: make prereq && make prereq-extra
 
     - name: Install
       run: make dev
diff --git a/Makefile b/Makefile
index 01563a24..d2d512cd 100644
--- a/Makefile
+++ b/Makefile
@@ -133,7 +133,7 @@ tests:
 	$(PYTHON) -m pytest -rA --html=$(TEST_RESULTS) --self-contained-html tests/
 
 prereq:
-	$(PYTHON) -m pip install $(PIP_FLAGS) $(PIP_INSTALL_FLAGS) wheel Cython cython numpy scipy matplotlib pyyaml h5py pybind11 MeshPy tabulate modepy mpi4py pyamg meshio
+	$(PYTHON) -m pip install $(PIP_FLAGS) $(PIP_INSTALL_FLAGS) setuptools wheel Cython cython numpy scipy matplotlib pyyaml h5py pybind11 MeshPy tabulate modepy mpi4py pyamg meshio
 	$(PYTHON) -m pip install $(PIP_FLAGS) $(PIP_INSTALL_FLAGS) scikit-sparse
 
 prereq-extra: