diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index e57bce54..29dd278a 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -177,8 +177,12 @@ jobs:
           TAG="${GITHUB_REF_NAME#v}"   # v0.20.1-lotus.1 -> 0.20.1-lotus.1
           npm version "$TAG" --no-git-tag-version --allow-same-version
 
+      # `--tag lotus`: npm >= 11 refuses to publish a prerelease (x.y.z-lotus.N)
+      # without an explicit dist-tag (run #1861). cinny pins exact versions, so
+      # the dist-tag is only a namespace — it keeps `latest` pointing at the
+      # last upstream-parity publish.
       - name: Publish
         working-directory: embedded/web
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITEA_NPM_TOKEN }}
-        run: npm publish --access public
+        run: npm publish --access public --tag lotus