···44# 1. workflow_run: After Nix CI passes on main. Builds the snap to validate
55# the packaging pipeline on every push to main.
66#
77-# 2. release (published): After release-plz creates a GitHub release and tag.
88-# Builds the snap with the release version and publishes to the Snap Store.
99-#
1010-# 3. workflow_dispatch: Manual retry for a failed release. Accepts a tag name
77+# 2. workflow_dispatch: Triggered by the release-plz workflow after a release
88+# is created, or manually for retrying a failed release. Accepts a tag name
119# input and publishes the snap for that tag.
1210#
1313-# On release day, both triggers 1 and 2 fire independently — the workflow_run
1414-# from the merge to main, and the release event from release-plz tagging. This
1515-# is intentional: the dev run validates the pipeline, and the release run
1616-# publishes the versioned snap.
1111+# 3. release (published): Kept as a fallback trigger in case the release is
1212+# created with a token that fires events (e.g. a PAT or GitHub App token).
1313+#
1414+# Note: release-plz uses GITHUB_TOKEN, so releases it creates do not fire the
1515+# release event (GitHub Actions limitation). The release-plz workflow explicitly
1616+# dispatches this workflow instead.
17171818name: Publish
1919