diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 00000000..12215c1f
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,15 @@
+name: build
+
+on:
+  release:
+    types: [ released ]
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  build:
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish_pure_python.yml@v1
+    with:
+      upload_to_pypi: ${{ (github.event_name == 'release') && (github.event.action == 'released') }}
+    secrets:
+      pypi_token: ${{ secrets.PYPI_PASSWORD_STSCI_MAINTAINER }}
diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
index 66b7e7c1..cadc14fb 100644
--- a/.github/workflows/changelog.yml
+++ b/.github/workflows/changelog.yml
@@ -1,24 +1,18 @@
-name: Changelog
+name: confirm changelog entry
 
 on:
   pull_request:
     types: [labeled, unlabeled, opened, synchronize, reopened]
 
-# Only cancel in-progress jobs or runs for the current workflow
-#   This cancels the already triggered workflows for a specific PR without canceling
-#   other instances of this workflow (other PRs, scheduled triggers, etc) when something
-#   within that PR re-triggers this CI
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
-  changelog:
-    name: Confirm changelog entry
+  check:
     runs-on: ubuntu-latest
     steps:
-    - name: Check change log entry
-      uses: scientific-python/action-check-changelogfile@6087eddce1d684b0132be651a4dad97699513113  # 0.2
+    - uses: scientific-python/action-check-changelogfile@0.2
       env:
         CHANGELOG_FILENAME: CHANGES.rst
         CHECK_MILESTONE: false
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4f6a5be5..c871d446 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,30 +18,17 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  check:
-    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v1
-    with:
-      envs: |
-        - linux: check-style
-        - linux: build-dist
   test:
     uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v1
     with:
       envs: |
-        - linux: test-oldestdeps-cov-xdist
-          python-version: 3.9
-        - linux: test-xdist
-          python-version: '3.9'
-        - linux: test-xdist
-          python-version: '3.10'
-        - linux: test-xdist
-          python-version: '3.11'
-        - macos: test-xdist
-          python-version: '3.11'
-        - linux: test-cov-xdist
+        - linux: py39-oldestdeps-cov-xdist
+        - linux: py310-xdist
+        - macos: py311-xdist
+        - linux: py311-cov-xdist
           coverage: 'codecov'
   test_downstream:
-    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@main
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v1
     with:
       setenv: |
         CRDS_PATH: ${{ needs.crds.outputs.path }}
diff --git a/.github/workflows/ci_cron.yml b/.github/workflows/ci_cron.yml
index ee63d5a4..08ba3f68 100644
--- a/.github/workflows/ci_cron.yml
+++ b/.github/workflows/ci_cron.yml
@@ -1,5 +1,4 @@
-
-name: Weekly cron
+name: Weekly CI
 
 on:
   schedule:
@@ -9,10 +8,14 @@ on:
     # We also want this workflow triggered if the `Weekly CI` label is
     # added or present when PR is updated
     types:
-      - synchronize
+      - opened
+      - reopened
       - labeled
+      - unlabeled
+      - synchronize
   push:
-    tags: "*"
+    tags:
+      - "*"
   workflow_dispatch:
 
 jobs:
@@ -21,8 +24,8 @@ jobs:
     if: (github.repository == 'spacetelescope/stpipe' && (github.event_name == 'schedule' || github.event_name == 'push' || github.event_name == 'workflow_dispatch' || contains(github.event.pull_request.labels.*.name, 'Weekly CI')))
     with:
       envs: |
-        - macos: test-xdist
-          python-version: 3.9
-        - macos: test-xdist
-          python-version: 3.10
-        - linux: test-devdeps-xdist
+        - macos: py39-xdist
+        - macos: py310-xdist
+        - windows: py311-xdist
+        - linux: py3-devdeps-xdist
+        - macos: py3-devdeps-xdist
diff --git a/.github/workflows/publish-to-pypi.yml b/.github/workflows/publish-to-pypi.yml
deleted file mode 100644
index 8f96ce9d..00000000
--- a/.github/workflows/publish-to-pypi.yml
+++ /dev/null
@@ -1,16 +0,0 @@
-name: Publish to PyPI
-
-on:
-  release:
-    types: [released]
-
-jobs:
-  publish:
-    uses: spacetelescope/action-publish_to_pypi/.github/workflows/workflow.yml@master
-    with:
-      test: false
-      build_platform_wheels: false # Set to true if your package contains a C extension
-    secrets:
-      user: ${{ secrets.PYPI_USERNAME_STSCI_MAINTAINER }}
-      password: ${{ secrets.PYPI_PASSWORD_STSCI_MAINTAINER }} # WARNING: Do not hardcode secret values here! If you want to use a different user or password, you can override this secret by creating one with the same name in your Github repository settings.
-      test_password: ${{ secrets.PYPI_PASSWORD_STSCI_MAINTAINER_TEST }}