diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cf10611..94377b9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -29,7 +29,7 @@ jobs:
           if [[ "${GITHUB_REF_NAME}" == *"-"* ]]; then
             DIST_TAG=rc
           fi
-          pnpm publish --filter cryptgeon --tag "${DIST_TAG}"
+          pnpm publish --filter cryptgeon --tag "${DIST_TAG}" --no-git-checks
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
diff --git a/docs/roadmap.md b/docs/roadmap.md
index e76b8fc..60a1a9f 100644
--- a/docs/roadmap.md
+++ b/docs/roadmap.md
@@ -6,7 +6,6 @@
 - Add remaining shared tooling to the pnpm catalog (`vite`, `tsdown`).
 - Move formatting, linting and type-checking + git hooks onto `vite-plus` (oxlint, oxfmt, vitest).
 - Re-add CSP (`Content-Security-Policy`) wired into the axum router (was in `csp.rs`, removed as unused).
-- Move all CLI deps to `devDependencies` — they bundle into the single output file anyway.
 
 ## Unified payload (drop the text/file union)