diff --git a/.github/workflows/entrypoint.yml b/.github/workflows/entrypoint.yml
index 7ef76c0..d42c3fc 100644
--- a/.github/workflows/entrypoint.yml
+++ b/.github/workflows/entrypoint.yml
@@ -6,6 +6,9 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-python@v4
+          with:
+            python-version: '3.10'
+            cache: pip
       - run: python -m pip install -U pip
       - run: python -m pip install .
       - run: matrix-webhook -h
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 325297e..af22e97 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -5,5 +5,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
-      - uses: psf/black@stable
-      - uses: pyupio/safety@2.3.5
+      - run: pipx install poetry
+      - uses: actions/setup-python@v4
+          with:
+            python-version: '3.10'
+            cache: poetry
+      - run: poetry install --with dev --no-interaction
+      - run: poetry run flake8 .
+      - run: poetry run black .
+      - run: poetry run pydocstyle
+      - run: poetry run safety check
+      - run: poetry run poetry check
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 03bec11..aaccd85 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,9 +10,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
-      - run: pip install -U poetry twine wheel
-      - run: poetry build
-      - run: twine upload --non-interactive -u __token__ -p ${{ secrets.PYPI_TOKEN }} dist/*
+      - run: pipx install poetry
+      - uses: actions/setup-python@v4
+          with:
+            python-version: '3.10'
+            cache: poetry
+      - run: poetry publish --build -u __token__ -p ${{ secrets.PYPI_TOKEN }}
       - run: echo "TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
       - run: gh release create -t "Release ${{ env.TAG}}" -n "$(awk '/## \[${{ env.TAG }}] - /{flag=1;next}/## \[/{flag=0}flag' CHANGELOG.md)" ${{ env.TAG }} dist/*
         env:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index fe34a08..470c7fb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,7 +6,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-- update tooling & lints
+- update tooling
+- update lints
+- update ci/cd
 
 ## [v3.5.0] - 2022-09-07