diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 48a3066..bf28e5d 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -106,6 +106,11 @@ jobs:
           args: release --clean
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # The tag being released, not whichever tag goreleaser finds on HEAD.
+          # It resolves one from `git tag --points-at HEAD --sort=-version:refname`,
+          # and git's version sort ranks v0.0.1-alpha.2 above v0.0.1, so a stable
+          # tag on the same commit as its prerelease republishes the prerelease.
+          GORELEASER_CURRENT_TAG: ${{ steps.tag.outputs.value }}
           # Pushing the cask to loft-sh/homebrew-tap is a cross-repo write, which
           # GITHUB_TOKEN cannot do.
           HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}