series/3.5.x: Upgrade release action, bump version (#1591)

This should fix the release workflow error:

  InvalidDistribution: Metadata is missing required fields: Name, Version.
  Make sure the distribution includes the files where those fields are specified,
  and is using a supported Metadata-Version: 1.0, 1.1, 1.2, 2.0, 2.1, 2.2, 2.3.

Also bump patch version for another attempt.

Signed-off-by: Jussi Kukkonen <[email protected]>

Author: jku

.github/workflows/release.yml

@@ -124,7 +124,7 @@ jobs:
         uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
 
       - name: publish
-        uses: pypa/gh-action-pypi-publish@f7600683efdcb7656dec5b29656edb7bc586e597 # v1.10.3
+        uses: pypa/gh-action-pypi-publish@f7600683efdcb7656dec5b29656edb7bc586e597 # v1.13.0
         with:
           packages-dir: built-packages/
           attestations: true

CHANGELOG.md

@@ -8,6 +8,15 @@ All versions prior to 0.9.0 are untracked.
 
 ## [Unreleased]
 
+## [3.5.5]
+
+This is the last planned release in 3.5.x series: All users should upgrade to
+a newer release series.
+
+### Fixed
+
+* Release process fix for [3.5.4]
+
 ## [3.5.4]
 
 ### Fixed
@@ -560,7 +569,9 @@ This is a corrective release for [2.1.1].
 
 
 <!--Release URLs -->
-[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v3.5.3...HEAD
+[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v3.5.5...series/3.5.x
+[3.5.5]: https://github.com/sigstore/sigstore-python/compare/v3.5.4...v3.5.5
+[3.5.4]: https://github.com/sigstore/sigstore-python/compare/v3.5.3...v3.5.4
 [3.5.3]: https://github.com/sigstore/sigstore-python/compare/v3.5.2...v3.5.3
 [3.5.2]: https://github.com/sigstore/sigstore-python/compare/v3.5.1...v3.5.2
 [3.5.1]: https://github.com/sigstore/sigstore-python/compare/v3.5.0...v3.5.1

sigstore/__init__.py

@@ -25,4 +25,4 @@
 * `sigstore.sign`: creation of Sigstore signatures
 """
 
-__version__ = "3.5.4"
+__version__ = "3.5.5"