diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 5139f3e..6ebaab4 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -87,4 +87,5 @@ jobs:
         with:
           name: dist
           path: dist/
-      - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1
+      # v1.14.2 includes Twine 7, required for core metadata 2.5.
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3a3c3b0..0a604b0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,16 @@ All notable changes to the `pisama` meta-package are documented here. The packag
 
 ## [Unreleased]
 
-## [0.6.3] - 2026-09-08
+## [0.6.4] - 2026-09-08
+
+### Fixed
+
+- Update the pinned PyPI publishing action to support core metadata 2.5 while
+  retaining metadata validation, artifact smoke tests and trusted publishing.
+- Include the documentation fixes prepared for 0.6.3. That release failed
+  publisher validation before upload; its original Git tag is preserved.
+
+## [0.6.3] - 2026-09-08 (not published to PyPI)
 
 ### Fixed
 
diff --git a/pyproject.toml b/pyproject.toml
index 4f1b427..bce06eb 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "pisama"
-version = "0.6.3"
+version = "0.6.4"
 description = "Multi-agent failure detection for production AI systems"
 readme = "README.md"
 license = "MIT"
diff --git a/src/pisama/__init__.py b/src/pisama/__init__.py
index 3c2b77d..64ee6a1 100644
--- a/src/pisama/__init__.py
+++ b/src/pisama/__init__.py
@@ -14,7 +14,7 @@
 
     __version__ = _pkg_version("pisama")
 except PackageNotFoundError:  # running from a source checkout without an install
-    __version__ = "0.6.3"
+    __version__ = "0.6.4"
 
 from pisama._analyze import AnalyzeResult, Issue, analyze, async_analyze
 from pisama._http import PisamaAuthError