diff --git a/.github/workflows/mypy.yml b/.github/workflows/mypy.yml
index ea0b4e5..4c22a52 100644
--- a/.github/workflows/mypy.yml
+++ b/.github/workflows/mypy.yml
@@ -20,7 +20,7 @@ jobs:
 
     strategy:
       matrix:
-        os: ['ubuntu-22.04', 'windows-2019']
+        os: ['ubuntu-22.04', 'windows-2022']
       fail-fast: false
 
     steps:
diff --git a/.github/workflows/octocheese.yml b/.github/workflows/octocheese.yml
index 31ae9f1..7434e33 100644
--- a/.github/workflows/octocheese.yml
+++ b/.github/workflows/octocheese.yml
@@ -6,6 +6,9 @@ on:
   schedule:
     - cron: 0 12 * * *
 
+permissions:
+  contents: write
+
 jobs:
   Run:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/python_ci.yml b/.github/workflows/python_ci.yml
index f31486e..60eebbf 100644
--- a/.github/workflows/python_ci.yml
+++ b/.github/workflows/python_ci.yml
@@ -18,8 +18,8 @@ permissions:
 
 jobs:
   tests:
-    name: "windows-2019 / Python ${{ matrix.config.python-version }}"
-    runs-on: "windows-2019"
+    name: "windows-2022 / Python ${{ matrix.config.python-version }}"
+    runs-on: "windows-2022"
     continue-on-error: ${{ matrix.config.experimental }}
     env:
       USING_COVERAGE: '3.7,3.8,3.9,3.10,3.11,3.12,3.13,pypy-3.7,pypy-3.8,pypy-3.9'
diff --git a/.readthedocs.yml b/.readthedocs.yml
index a0c8146..37baa10 100644
--- a/.readthedocs.yml
+++ b/.readthedocs.yml
@@ -20,5 +20,6 @@ build:
     post_create_environment:
      - pip install .[readme,cli]
     post_install:
-     - pip install sphinxcontrib-applehelp==1.0.4 sphinxcontrib-devhelp==1.0.2 sphinxcontrib-htmlhelp==2.0.1
-       sphinxcontrib-jsmath==1.0.1 sphinxcontrib-qthelp==1.0.3 sphinxcontrib-serializinghtml==1.1.5
+     - pip install sphinxcontrib-applehelp==1.0.4 sphinxcontrib-devhelp==1.0.2
+       sphinxcontrib-htmlhelp==2.0.1 sphinxcontrib-jsmath==1.0.1
+       sphinxcontrib-qthelp==1.0.3 sphinxcontrib-serializinghtml==1.1.5
diff --git a/formate.toml b/formate.toml
index 56be273..f194c96 100644
--- a/formate.toml
+++ b/formate.toml
@@ -36,6 +36,7 @@ known_third_party = [
     "dom_toml",
     "domdf_python_tools",
     "importlib_metadata",
+    "license_expression",
     "natsort",
     "nh3",
     "packaging",
diff --git a/tox.ini b/tox.ini
index bfa1be0..2ab2dc2 100644
--- a/tox.ini
+++ b/tox.ini
@@ -68,7 +68,6 @@ download = True
 setenv =
     PYTHONDEVMODE=1
     PIP_DISABLE_PIP_VERSION_CHECK=1
-    UNSAFE_PYO3_SKIP_VERSION_CHECK=1
 
 [testenv:py312]
 download = True
@@ -124,6 +123,7 @@ deps =
     flake8-sphinx-links>=0.0.4
     flake8-strftime>=0.1.1
     flake8-typing-imports>=1.10.0
+    git+https://github.com/domdfcoding/restructuredtext-lint.git@fix-deprecations
     git+https://github.com/domdfcoding/flake8-rst-docstrings-sphinx.git
     git+https://github.com/domdfcoding/flake8-rst-docstrings.git
     git+https://github.com/python-formate/flake8-unused-arguments.git@magic-methods