diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a76712bf0..73ed13648 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -124,7 +124,7 @@ jobs:
         uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
 
       - name: publish
-        uses: pypa/gh-action-pypi-publish@f7600683efdcb7656dec5b29656edb7bc586e597 # v1.10.3
+        uses: pypa/gh-action-pypi-publish@f7600683efdcb7656dec5b29656edb7bc586e597 # v1.13.0
         with:
           packages-dir: built-packages/
           attestations: true
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e653d02ce..760a1d27a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,15 @@ All versions prior to 0.9.0 are untracked.
 
 ## [Unreleased]
 
+## [3.5.5]
+
+This is the last planned release in 3.5.x series: All users should upgrade to
+a newer release series.
+
+### Fixed
+
+* Release process fix for [3.5.4]
+
 ## [3.5.4]
 
 ### Fixed
@@ -560,7 +569,9 @@ This is a corrective release for [2.1.1].
 
 
 <!--Release URLs -->
-[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v3.5.3...HEAD
+[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v3.5.5...series/3.5.x
+[3.5.5]: https://github.com/sigstore/sigstore-python/compare/v3.5.4...v3.5.5
+[3.5.4]: https://github.com/sigstore/sigstore-python/compare/v3.5.3...v3.5.4
 [3.5.3]: https://github.com/sigstore/sigstore-python/compare/v3.5.2...v3.5.3
 [3.5.2]: https://github.com/sigstore/sigstore-python/compare/v3.5.1...v3.5.2
 [3.5.1]: https://github.com/sigstore/sigstore-python/compare/v3.5.0...v3.5.1
diff --git a/sigstore/__init__.py b/sigstore/__init__.py
index 17aecfaae..a3576e82b 100644
--- a/sigstore/__init__.py
+++ b/sigstore/__init__.py
@@ -25,4 +25,4 @@
 * `sigstore.sign`: creation of Sigstore signatures
 """
 
-__version__ = "3.5.4"
+__version__ = "3.5.5"