diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2d59f55..8c84f55 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -78,13 +78,12 @@ jobs:
         # create release notes
         deno run -A ./scripts/generateReleaseNotes.ts ${{ steps.get_tag_version.outputs.TAG_VERSION }} > ${{ github.workspace }}-CHANGELOG.txt
     - name: Release
-      uses: softprops/action-gh-release@v2
       if: matrix.config.kind == 'test_release' && startsWith(github.ref, 'refs/tags/')
+      # gh uploads the assets to a draft and then publishes it, which immutable releases require
       env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      with:
-        files: |
-          target/wasm32-unknown-unknown/release/plugin.wasm
+        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      run: |
+        gh release create "$GITHUB_REF_NAME" --verify-tag --title "$GITHUB_REF_NAME" \
+          --notes-file ${{ github.workspace }}-CHANGELOG.txt \
+          target/wasm32-unknown-unknown/release/plugin.wasm \
           deployment/schema.json
-        body_path: ${{ github.workspace }}-CHANGELOG.txt
-        draft: false