From 5dcb0a8476c6e6a4e6a5828aeb5761310e374128 Mon Sep 17 00:00:00 2001
From: Nathan Goldbaum <nathan.goldbaum@gmail.com>
Date: Fri, 21 Aug 2026 11:31:09 -0600
Subject: [PATCH] Only run publish step on tags

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 412fbb3..0abf6c4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -108,6 +108,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     needs: [lint, test, package-sdist, package-wheel]
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
     environment: publish
     permissions:
       # Required by Trusted Publishing
@@ -131,5 +132,4 @@ jobs:
           pattern: wheels-ubuntu-latest-*
           path: dist/
       - name: Publish to PyPI
-        if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags/')
         uses: pypa/gh-action-pypi-publish@release/v1