diff --git a/.github/workflows/galaxy-import.yml b/.github/workflows/galaxy-import.yml
index 9ccf09b..6dd789c 100644
--- a/.github/workflows/galaxy-import.yml
+++ b/.github/workflows/galaxy-import.yml
@@ -1,9 +1,14 @@
 name: Galaxy Import
 
 on:
+  # Manual tags pushed outside Actions
   push:
     tags:
       - "v*"
+  # semantic-release creates GitHub Releases with GITHUB_TOKEN; that does not
+  # re-trigger tag-push workflows, so listen for the release event too.
+  release:
+    types: [published]
   workflow_dispatch:
 
 jobs:
@@ -11,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: "3.x"
 
@@ -27,4 +32,6 @@ jobs:
             exit 1
           fi
           # Hardcode legacy github_user so FQN stays 0x0i.basic_service
+          # Do not set galaxy_info.namespace in meta (0x0i is not lint-valid;
+          # omitting namespace lets Galaxy keep the existing listing).
           ansible-galaxy role import 0x0I basic-service --token "$GALAXY_API_KEY"
diff --git a/tests/ansible-lint.yml b/tests/ansible-lint.yml
index f2233df..d8c2f1b 100644
--- a/tests/ansible-lint.yml
+++ b/tests/ansible-lint.yml
@@ -7,3 +7,6 @@ exclude_paths:
   - ./*
 warn_list:
   - experimental
+  # Galaxy FQN is 0x0i.basic_service; meta cannot declare that namespace
+  # (namespaces must start with a letter) without breaking Galaxy import.
+  - role-name