diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fbad8cf21..32218b5e4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,6 +5,9 @@ on:
     tags:
       - 'v*'
 
+permissions:
+  contents: write
+
 jobs:
   release:
     runs-on: ubuntu-latest
diff --git a/package.json b/package.json
index 131ce49e5..548c2bcff 100644
--- a/package.json
+++ b/package.json
@@ -18,7 +18,7 @@
     "docs:contributors": "esno scripts/update-contributors.ts",
     "lint": "eslint --cache .",
     "lint:fix": "nr lint --fix",
-    "release": "bumpp package.json packages/*/package.json --commit --push --tag && pnpm -r publish --access public",
+    "release": "bumpp package.json packages/*/package.json --commit --push --tag && git update-ref refs/heads/release refs/heads/main && git push origin release && pnpm -r publish --access public",
     "test": "vitest --api -r test/core",
     "test:run": "vitest run -r test/core",
     "test:all": "CI=true pnpm -r --stream run test --allowOnly",