CI: Harden GHA configuration #24

	# This workflow checks that any added benchmarks run on the latest Matplotlib
	# release. It does _not_ update any results.
	name: Benchmark Check
	permissions:
	contents: read
	on: [push, pull_request]

	jobs:
	asv:
	name: asv
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v2
	with:
	persist-credentials: false

	- name: Set up Python 3
	uses: actions/setup-python@v1
	with:
	python-version: 3.12

	- name: Install asv
	run: pip3 install asv matplotlib

	- name: Run asv
	run: \|
	asv machine --yes
	asv run

	- name: Check benchmarks.json is up to date
	run: \|
	git diff --exit-code -- results/benchmarks.json

Provide feedback