OK, so problem identified, it's the

.github/workflows/release-announcements.yml

, we patched it already