diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index f897dd93..f5586dbf 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -56,7 +56,7 @@ jobs:
           files: ${{ steps.build.outputs.asset_path }}
       - name: Upload the distribution to PyPI
         if: ${{ env.B2_PYPI_PASSWORD != '' && steps.prerelease_check.outputs.prerelease == 'false' }}
-        uses: pypa/gh-action-pypi-publish@v1.3.1
+        uses: pypa/gh-action-pypi-publish@v1.13.0
         with:
           user: __token__
           password: ${{ secrets.B2_PYPI_PASSWORD }}
diff --git a/changelog.d/+bump-gh-action-pypi.infrastructure.md b/changelog.d/+bump-gh-action-pypi.infrastructure.md
new file mode 100644
index 00000000..9467ff98
--- /dev/null
+++ b/changelog.d/+bump-gh-action-pypi.infrastructure.md
@@ -0,0 +1 @@
+Bump pypa/gh-action-pypi-publish from 1.3.1 to 1.13.0 in /.github/workflows.
\ No newline at end of file