diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index f893c4f0..775b60da 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -53,7 +53,7 @@ jobs:
         shell: bash
       - name: Report coverage
         if: ${{ matrix.do-coverage && !failure() }}
-        uses: codecov/codecov-action@v4.1.0
+        uses: codecov/codecov-action@v4
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: .coverage
@@ -67,7 +67,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python: ['3.7', '3.8', '3.9', '3.10']
+        python: ['3.7', '3.8', '3.9', '3.10', '3.11', '3.12']
         os: [ubuntu-latest, macos-latest, windows-latest]
 
         exclude:
@@ -76,6 +76,9 @@ jobs:
             os: ubuntu-latest
           - python: '3.7'
             os: ubuntu-latest
+          # combo not available
+          - python: '3.7'
+            os: macos-latest
 
     steps:
       - name: Checkout code
diff --git a/changelog/126.pkg_management.rst b/changelog/126.pkg_management.rst
new file mode 100644
index 00000000..eda2a4a1
--- /dev/null
+++ b/changelog/126.pkg_management.rst
@@ -0,0 +1 @@
+Restrict `numpy` dependency to `numpy >= 1.2, < 2.0`.
diff --git a/requirements/install.txt b/requirements/install.txt
index 265cf2ec..2fd5eff2 100644
--- a/requirements/install.txt
+++ b/requirements/install.txt
@@ -3,5 +3,5 @@
 -r build.txt
 astropy >= 4.3.1
 h5py >= 3.0
-numpy >= 1.20
+numpy >= 1.20, < 2.0
 scipy >= 0.19
diff --git a/setup.cfg b/setup.cfg
index b86dc4c0..37aa4984 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -47,7 +47,7 @@ install_requires =
     # ought to mirror requirements/install.txt
     astropy >= 4.3.1
     h5py >= 3.0
-    numpy >= 1.20
+    numpy >= 1.20, < 2.0
     scipy >= 0.19
 
 [options.extras_require]
@@ -82,3 +82,4 @@ skip = *.png,*cache*,*egg*,.git,.hypothesis,.idea,.tox,_build,venv
 ignore-words-list =
     crate,
     oce,
+    assertIn,