fix: prevent upstream tags from polluting origin

Multiple scripts and CI workflows were fetching/pushing tags in ways
that caused ~900 upstream OpenCode tags to leak into our origin remote:

- CI `git fetch upstream` auto-followed tags — added `--no-tags`
- Release scripts used `git push --tags` pushing ALL local tags to
  origin — changed to push only the specific new tag
- Release scripts used `git fetch --force --tags` without explicit
  remote — added explicit `origin`
- `script/publish.ts` used `--tags` flag — push only `v${version}`
- Docs referenced `git fetch upstream --tags` — fixed to `--no-tags`

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: anandgupta42

.github/workflows/ci.yml

@@ -94,7 +94,7 @@ jobs:
       - name: Add upstream remote
         run: |
           git remote add upstream https://github.com/anomalyco/opencode.git || true
-          git fetch upstream --quiet
+          git fetch upstream --quiet --no-tags
 
       - name: Install merge tooling deps
         run: bun install

RELEASING.md

@@ -69,7 +69,7 @@ Add a new section at the top of `CHANGELOG.md`:
 git add -A
 git commit -m "release: v0.2.0"
 git tag v0.2.0
-git push origin main --tags
+git push origin main v0.2.0
 ```
 
 ### 4. What happens automatically
@@ -111,7 +111,7 @@ bun run packages/altimate-code/script/bump-version.ts --engine 0.2.1
 git add -A
 git commit -m "release: engine-v0.2.1"
 git tag engine-v0.2.1
-git push origin main --tags
+git push origin main engine-v0.2.1
 ```
 
 This triggers `.github/workflows/publish-engine.yml` which publishes only to PyPI.

github/script/release

@@ -10,7 +10,7 @@ while [ "$#" -gt 0 ]; do
 done
 
 # Get the latest Git tag
-git fetch --force --tags
+git fetch origin --force --tags
 latest_tag=$(git tag --sort=committerdate | grep -E '^github-v[0-9]+\.[0-9]+\.[0-9]+$' | tail -1)
 if [ -z "$latest_tag" ]; then
     echo "No tags found"
@@ -38,4 +38,4 @@ echo "New version: $new_version"
 
 # Tag
 git tag $new_version
-git push --tags
+git push origin "$new_version"

script/publish.ts

@@ -63,7 +63,7 @@ if (Script.release) {
     await $`git tag v${Script.version}`
     await $`git fetch origin`
     await $`git cherry-pick HEAD..origin/dev`.nothrow()
-    await $`git push origin HEAD --tags --no-verify --force-with-lease`
+    await $`git push origin HEAD v${Script.version} --no-verify --force-with-lease`
     await new Promise((resolve) => setTimeout(resolve, 5_000))
   }
 

script/upstream/README.md

@@ -283,7 +283,7 @@ Run `bun run script/upstream/analyze.ts --branding --verbose` to see details. Co
 
 ```bash
 git remote add upstream https://github.com/anomalyco/opencode.git
-git fetch upstream --tags
+git fetch upstream --no-tags
 ```
 
 ### Aborting a merge

sdks/vscode/script/release

@@ -10,7 +10,7 @@ while [ "$#" -gt 0 ]; do
 done
 
 # Get the latest Git tag
-git fetch --force --tags
+git fetch origin --force --tags
 latest_tag=$(git tag --sort=committerdate | grep -E '^vscode-v[0-9]+\.[0-9]+\.[0-9]+$' | tail -1)
 if [ -z "$latest_tag" ]; then
     echo "No tags found"
@@ -38,4 +38,4 @@ echo "New version: $new_version"
 
 # Tag
 git tag $new_version
-git push --tags
+git push origin "$new_version"