diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index e25e3bc..b3ec884 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -9,11 +9,13 @@ jobs:
   build:
     strategy:
       matrix:
-        version: ['cp38-cp38', 'cp39-cp39', 'cp310-cp310']
+        version: ['cp38-cp38', 'cp39-cp39', 'cp310-cp310', 'cp311-cp311']
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository and submodules
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
+        with:
+          submodules: true
       - name: Build
         run: |
           docker build -t builder .
@@ -21,10 +23,12 @@ jobs:
         run: |
           curl -J -O -L 'https://pypi.io/packages/source/z/zeroc-ice/zeroc-ice-3.6.5.tar.gz'
           tar zxf zeroc-ice-3.6.5.tar.gz
+          for f in patches/*; do patch -p0 < ${f}; done
+          docker run --rm -v $PWD/zeroc-ice-3.6.5:/build builder /bin/bash -c "cd /build ; /opt/python/${{ matrix.version }}/bin/python setup.py build -j 3"
           docker run --rm -v $PWD/zeroc-ice-3.6.5:/build builder /bin/bash -c "cd /build ; /opt/python/${{ matrix.version }}/bin/python setup.py bdist_wheel"
           docker run --rm -v $PWD/zeroc-ice-3.6.5:/build builder auditwheel repair --plat 'manylinux2014_x86_64' -w /build/dist /build/dist/zeroc_ice-3.6.5-${{ matrix.version }}-linux_x86_64.whl
       - name: Upload artifacts
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v3
         with:
           name: artifacts
           path: zeroc-ice-3.6.5/dist/*manylinux*.whl
@@ -35,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Download artifacts from build
-        uses: actions/download-artifact@v2
+        uses: actions/download-artifact@v3
       - name: List artifacts
         run: ls -R
       - name: Release
diff --git a/.gitmodules b/.gitmodules
new file mode 100644
index 0000000..613dc2f
--- /dev/null
+++ b/.gitmodules
@@ -0,0 +1,3 @@
+[submodule "patches"]
+	path = patches
+	url = https://github.com/glencoesoftware/zeroc-ice-py-patches.git
diff --git a/README.md b/README.md
index 9ce819d..6774642 100644
--- a/README.md
+++ b/README.md
@@ -3,3 +3,6 @@ Linux x86_64 Zeroc Ice Python Builder
 
 Builds ZeroC Ice Python manylinux2014 wheel packages for Linux x86_64.
 
+** WARNING ** : the manylinux2014 wheel packages are bundled with
+OpenSSL 1.0.2k and should not be used in production - see
+https://github.com/pypa/manylinux#manylinux2014-centos-7-based.
diff --git a/patches b/patches
new file mode 160000
index 0000000..73d8d5d
--- /dev/null
+++ b/patches
@@ -0,0 +1 @@
+Subproject commit 73d8d5df4cfcb7ce2ba7d05d366f19e0f22e236e