diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 40e0037..4b063ab 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,11 +1,12 @@
 name: ci
 
+# Work happens on long-lived feature branches (feature/embedded-go-mcp);
+# CI runs on PRs to main and on release tags.
 on:
-  push:
-    branches: [main]
-    tags: ['v*']
   pull_request:
     branches: [main]
+  push:
+    tags: ['v*']
 
 permissions:
   contents: read
@@ -18,9 +19,9 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version: '1.25'