---
id: TASK-009
title: Release webhook downgrade guard
status: "\U0001F3C1 Done"
assignee: []
created_date: '2026-06-18 20:07'
updated_date: '2026-06-18 20:08'
labels:
  - bug
dependencies: []
priority: high
ordinal: 9000
---

## Description

<!-- SECTION:DESCRIPTION:BEGIN -->
Webhook published whatever tag fired (chronological), so an out-of-order lower tag (v0.1.0 pushed after v0.2.0) clobbered the tap formula to a lower version — brew reads that as a downgrade and never upgrades. Root cause was leftover dogfood test tags. Fixed: gitread.IsHighestVersion guards publishRelease; only the highest semver tag publishes. Deleted stray v0.1.0, deployed, republished v0.2.0. Commit 43ac61a.
<!-- SECTION:DESCRIPTION:END -->

## Acceptance Criteria
<!-- AC:BEGIN -->
- [ ] #1 Out-of-order/lower tag never downgrades the tap formula
- [ ] #2 Highest semver tag still publishes normally
<!-- AC:END -->