this looks like another GitHub Actions workflow compromise...

Is it really so hard for people to make releases manually?