diff --git a/.gitea/workflows/tag.yaml b/.gitea/workflows/tag.yaml
index 6dd6290..8f5290f 100644
--- a/.gitea/workflows/tag.yaml
+++ b/.gitea/workflows/tag.yaml
@@ -39,11 +39,22 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
 
+  release:
+    # Publishes the Gitea release for this tag (body = commits since the previous
+    # tag). Renovate copies that body into the bump PR in
+    # perso_private/tf-depl-kubernetes under "Release Notes"; without a release
+    # that section stays empty (bare "Compare Source" link).
+    needs: [build-push]
+    uses: perso/gitea-pipelines/.gitea/workflows/gitea-release.yaml@main
+    with:
+      image: jcabillot/opencode-openchamber
+    secrets: inherit
+
   trigger-renovate:
     # The deployment repo perso_private/tf-depl-kubernetes pins this image; its
     # Renovate instance only scans hourly, so this dispatch opens the image bump
     # PR within minutes of the release instead of up to an hour later.
-    needs: [build-push]
+    needs: [build-push, release]
     runs-on: ubuntu-latest
     steps:
       - name: Trigger Renovate on perso_private/tf-depl-kubernetes
@@ -54,6 +65,6 @@ jobs:
           curl -sS -f -X POST \
             -u "renovate:${{ secrets.RENOVATE_TOKEN }}" \
             -H "Content-Type: application/json" \
-            -d '{{"ref":"main"}}' \
+            -d '{"ref":"main"}' \
             "https://scm.cabillot.eu/api/v1/repos/perso_private/tf-depl-kubernetes/actions/workflows/renovate.yaml/dispatches"
           echo "Renovate dispatched on perso_private/tf-depl-kubernetes"