diff --git a/.circleci/config.yml b/.circleci/config.yml
deleted file mode 100644
index 144da03..0000000
--- a/.circleci/config.yml
+++ /dev/null
@@ -1,116 +0,0 @@
-version: 2.1
-
-references:
-  install-poetry: &install-poetry
-    run:
-      name: Install Poetry
-      command: |
-        curl -sSL https://raw.githubusercontent.com/python-poetry/poetry/master/get-poetry.py | python
-  restore-dependencies-cache: &restore-dependencies-cache
-    restore_cache:
-      keys:
-        - deps-py<< parameters.python-version >>-django<< parameters.django-version >>-{{ checksum "poetry.lock" }}
-  install-dependencies: &install-dependencies
-    run:
-      name: Install Dependencies
-      command: |
-        source $HOME/.poetry/env
-        poetry install
-        poetry run pip install "django~=<< parameters.django-version >>.0"
-  save-dependencies-cache: &save-dependencies-cache
-    save_cache:
-      key: deps-py<< parameters.python-version >>-django<< parameters.django-version >>-{{ checksum "poetry.lock" }}
-      paths:
-        - /home/circleci/.cache/pypoetry/virtualenvs
-  parametrised-python-executor: &parametrised-python-executor
-    parameters:
-      python-version:
-        type: string
-      django-version:
-        type: string
-    executor:
-      name: python
-      version: << parameters.python-version >>
-  version-matrix: &version-matrix
-    matrix:
-      parameters:
-        python-version: ["3.6", "3.7", "3.8", "3.9", "3.10"]
-        django-version: ["2.2", "3.0", "3.1", "3.2", "4.0"]
-      exclude:
-        - python-version: "3.6"
-          django-version: "4.0"
-        - python-version: "3.7"
-          django-version: "4.0"
-
-executors:
-  python:
-    parameters:
-      version:
-        type: string
-    docker:
-      - image: circleci/python:<< parameters.version >>
-
-jobs:
-  build-test:
-    <<: *parametrised-python-executor
-
-    steps:
-      - checkout
-
-      - *install-poetry
-      - *restore-dependencies-cache
-      - *install-dependencies
-      - *save-dependencies-cache
-
-      - run:
-          name: Run Tests
-          command: |
-            source $HOME/.poetry/env
-            poetry run ./runtests
-
-  deploy:
-    executor:
-      name: python
-      version: "3.7"
-    steps:
-      - checkout
-      - run:
-          name: Push to PyPI
-          command: |
-            curl -sSL https://raw.githubusercontent.com/python-poetry/poetry/master/get-poetry.py | python
-            source $HOME/.poetry/env
-            poetry publish \
-              --build \
-              --username "${PYPI_USERNAME}" \
-              --password "${PYPI_PASSWORD}" \
-              --no-interaction
-
-workflows:
-  version: 2.1
-
-  build-test:
-    jobs:
-      - build-test:
-          name: build-test-py<< matrix.python-version >>-Django<< matrix.django-version >>
-          <<: *version-matrix
-
-  build-test-deploy:
-    jobs:
-      - build-test:
-          name: build-test-py<< matrix.python-version >>-Django<< matrix.django-version >>
-          <<: *version-matrix
-          filters:
-            tags:
-              only: /v[0-9]+(\.[0-9]+)*/
-            branches:
-              ignore: /.*/
-
-      - deploy:
-          context: thread-pypi
-          requires:
-            - build-test
-          filters:
-              tags:
-                only: /v[0-9]+(\.[0-9]+)*/
-              branches:
-                ignore: /.*/
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
new file mode 100644
index 0000000..0e0e8f0
--- /dev/null
+++ b/.github/workflows/check.yml
@@ -0,0 +1,50 @@
+name: Check
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+jobs:
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        python-version: ["3.8", "3.9", "3.10", "3.11"]
+        django-version: ["3.2", "4.0", "4.1", "4.2", "5.0"]
+        exclude:
+          # Python 3.11 is not supported until Django 4.1
+          - python-version: "3.11"
+            django-version: "3.2"
+          - python-version: "3.11"
+            django-version: "4.0"
+
+          # Python <3.10 is not supported by Django 5.0+
+          - python-version: "3.8"
+            django-version: "5.0"
+          - python-version: "3.9"
+            django-version: "5.0"
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Poetry
+        run: pipx install poetry==1.3.2
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v4
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: poetry
+
+      - name: Set up dependencies
+        run: |
+          poetry install
+          poetry run pip install "django~=${{ matrix.django-version }}.0"
+
+      - name: Run tests
+        run: poetry run ./runtests
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
new file mode 100644
index 0000000..c2b6b1e
--- /dev/null
+++ b/.github/workflows/publish.yml
@@ -0,0 +1,45 @@
+name: Create Release & Publish to PYPI
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  run-checks:
+    uses: ./.github/workflows/check.yml
+
+  publish:
+    runs-on: ubuntu-latest
+    needs:
+      - run-checks
+    steps:
+      - uses: actions/checkout@v4
+
+      # work around actions/checkout stripping annotations https://github.com/actions/checkout/issues/290
+      - name: Fetch tags
+        run: git fetch --tags --force
+
+      - name: Set up Poetry
+        run: pipx install poetry==1.3.2
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.9'
+          cache: poetry
+
+      - name: Build
+        run: poetry build
+
+      - name: Publish to PyPI
+        run: |
+          poetry publish \
+            --username "${PYPI_USERNAME}" \
+            --password "${PYPI_PASSWORD}" \
+            --no-interaction
+
+      - name: Create GitHub Release
+        uses: ncipollo/release-action@v1
+        with:
+          body: ${{ steps.tag_data.outputs.git-tag-annotation }}