diff --git a/.github/scripts/release-workflow-contract_test.py b/.github/scripts/release-workflow-contract_test.py
index 3212da9b85..a7db2657f3 100644
--- a/.github/scripts/release-workflow-contract_test.py
+++ b/.github/scripts/release-workflow-contract_test.py
@@ -120,6 +120,14 @@ class ReleaseWorkflowContractTest(unittest.TestCase):
         self.assertIn("xdg-utils", install)
         self.assertIn("command -v xdg-open", install)
 
+    def test_updater_manifest_date_dereferences_annotated_tag(self) -> None:
+        generate = step_block("Generate and verify updater manifest")
+        self.assertIn("git show -s --format=%cI", generate)
+        self.assertRegex(
+            generate,
+            r"needs\.prepare\.outputs\.tag \}\}\^\{commit\}",
+        )
+
     def test_macos_dmg_build_has_retry_timeout_and_diagnostics(self) -> None:
         build = step_block("Build Tauri desktop app")
         self.assertIn("timeout-minutes: 70", build)
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a72b0b573b..a623202c2b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1542,7 +1542,7 @@ jobs:
           RUSTUP_TOOLCHAIN: 1.88.0
         run: |
           set -euo pipefail
-          pub_date="$(git show -s --format=%cI '${{ needs.prepare.outputs.tag }}')"
+          pub_date="$(git show -s --format=%cI '${{ needs.prepare.outputs.tag }}^{commit}')"
           node scripts/release/updater-manifest.mjs generate \
             --assets-dir dist/release-assets \
             --output dist/release-assets/latest.json \