Try working around actions/checkout#882

Author: sethmlarson

.github/workflows/publish.yml

@@ -23,9 +23,13 @@ jobs:
     steps:
     - name: "Checkout repository"
       uses: "actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846"
+      with:
+        fetch-depth: 0
 
     - name: "Require signed git tag"
       run: |
+        # Work-around for actions/checkout#882 replacing all tags with lightweight tags.
+        git fetch --tags --force origin
         git show ${{ github.ref_name }}
         git verify-tag ${{ github.ref_name }}