Merge pull request #155 from opensafely-core/dependabot/github_action…

…s/mathieudutour/github-tag-action-6.1

chore(deps): bump mathieudutour/github-tag-action from 4.5 to 6.1

.github/workflows/build_and_publish.yaml

@@ -16,7 +16,14 @@ jobs:
           fetch-depth: 0
       - name: Bump version and push tag
         id: tag
-        uses: mathieudutour/[email protected]
+        uses: mathieudutour/[email protected]
+        # As this workflow is currently written,
+        # this is a redundant check: the workflow should only ever run on push to main.
+        # But it is an extra safeguard and reminder of the behaviour of github-tag-action.
+        # Pull requests can end up being tagged by github-tag-action,
+        # which is probably undesirable and very confusing to work out what's happening.
+        # See https://github.com/opensafely-core/ehrql/commit/3e55492e9c1b537fb5057f19f11f53a713fbae46
+        if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request'
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           default_bump: false