diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b0b1333..52b3b69 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,6 +22,9 @@ jobs:
         uses: actions/checkout@v7
         with:
           fetch-depth: 0
+          # Every git push in this job then uses the release token, which is
+          # on the bypass list of the main ruleset. The workflow token is not.
+          token: ${{ secrets.GH_RELEASE_TOKEN }}
 
       - name: Setup Node
         uses: actions/setup-node@v7
@@ -42,7 +45,7 @@ jobs:
           # commit is pushed straight to main.
           GITHUB_TOKEN: ${{ secrets.GH_RELEASE_TOKEN }}
 
-      - name: Move floating major tag
+      - name: Point the major version tag at the release
         if: steps.release.outputs.new_release_published == 'true'
         env:
           MAJOR_TAG: v${{ steps.release.outputs.new_release_major_version }}