diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 5c7e6d4..1b92781 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -26,4 +26,8 @@ jobs:
     - name: Publish to PyPI
       env:
         UV_PUBLISH_TOKEN: ${{ secrets.TANGO_PYPI_TOKEN }}
-      run: uv publish
+      # --check-url makes the upload idempotent: uv queries the index first and skips
+      # files already present instead of failing the run. Without it, any version that
+      # reached PyPI by another route — a manual `uv publish`, a re-run of this
+      # workflow — makes the GitHub Release that follows it go red for no real reason.
+      run: uv publish --check-url https://pypi.org/simple/