Without this a workflow_dispatch re-publish would have built main and attached a binary whose --version did not match the release tag.