fix: support metadata 2.5 in trusted publishing

.github/workflows/publish.yml

@@ -87,4 +87,5 @@ jobs:
         with:
           name: dist
           path: dist/
-      - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1
+      # v1.14.2 includes Twine 7, required for core metadata 2.5.
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2

CHANGELOG.md

@@ -4,7 +4,16 @@ All notable changes to the `pisama` meta-package are documented here. The packag
 
 ## [Unreleased]
 
-## [0.6.3] - 2026-09-08
+## [0.6.4] - 2026-09-08
+
+### Fixed
+
+- Update the pinned PyPI publishing action to support core metadata 2.5 while
+  retaining metadata validation, artifact smoke tests and trusted publishing.
+- Include the documentation fixes prepared for 0.6.3. That release failed
+  publisher validation before upload; its original Git tag is preserved.
+
+## [0.6.3] - 2026-09-08 (not published to PyPI)
 
 ### Fixed
 

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "pisama"
-version = "0.6.3"
+version = "0.6.4"
 description = "Multi-agent failure detection for production AI systems"
 readme = "README.md"
 license = "MIT"

src/pisama/__init__.py

@@ -14,7 +14,7 @@
 
     __version__ = _pkg_version("pisama")
 except PackageNotFoundError:  # running from a source checkout without an install
-    __version__ = "0.6.3"
+    __version__ = "0.6.4"
 
 from pisama._analyze import AnalyzeResult, Issue, analyze, async_analyze
 from pisama._http import PisamaAuthError