diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 95ae842..c17f7d3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -48,4 +48,4 @@ jobs:
           name: "dist"
           path: "dist/"
       - name: Publish package distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@f7600683efdcb7656dec5b29656edb7bc586e597 # v1.10.3
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
diff --git a/docs/source/index.rst b/docs/source/index.rst
index ef487be..fd28e11 100644
--- a/docs/source/index.rst
+++ b/docs/source/index.rst
@@ -122,9 +122,18 @@ Change history
 
 .. towncrier release notes start
 
-Trustme 1.3.0 (2026-08-05)
+Trustme 1.3.1 (2026-08-05)
 --------------------------
 
+Misc
+~~~~
+
+- Fix PyPI publish step `#720 <https://github.com/python-trio/trustme/issues/720>`__
+
+
+Trustme 1.3.0 (not released)
+----------------------------
+
 Features
 ~~~~~~~~
 
diff --git a/src/trustme/_version.py b/src/trustme/_version.py
index 67bc602..9c73af2 100644
--- a/src/trustme/_version.py
+++ b/src/trustme/_version.py
@@ -1 +1 @@
-__version__ = "1.3.0"
+__version__ = "1.3.1"