From 224295d664ccbf07f7cf521ee67458017249f1f5 Mon Sep 17 00:00:00 2001
From: M3gA-Mind <elvin@tinyhumans.ai>
Date: Thu, 15 Oct 2026 16:22:41 +0530
Subject: [PATCH] ci(release): push only the release tag

The Protect main ruleset requires a pull request for every change to main,
so pushing the release commit to main is always rejected (GH013). Push only
the tag; the next version already comes from the tags.
---
 .github/workflows/release.yml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ac41d5192..1556d1138 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -153,12 +153,14 @@ jobs:
         if: steps.publishable.outputs.publishable == 'true'
         run: cargo package --locked -p "$CRATE_NAME"
 
-      - name: Push release commit and tag
+      # Only the tag is pushed. The "Protect main" ruleset requires a pull
+      # request for every change to main, so pushing the release commit there
+      # is always rejected (GH013). The tag points at the release commit, which
+      # stays off main; the next version is computed from the tags.
+      - name: Push release tag
         env:
           RELEASE_TAG: ${{ steps.version.outputs.tag }}
-        run: |
-          git push origin "HEAD:${GITHUB_REF_NAME}"
-          git push origin "${RELEASE_TAG}"
+        run: git push origin "refs/tags/${RELEASE_TAG}"
 
       - name: Publish to crates.io
         if: steps.publishable.outputs.publishable == 'true'