diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 7d99a33..1460754 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -12,9 +12,15 @@ on:
         type: string
         default: main
       framework_ref:
+        # A tag is the right default -- a release should be reproducible from two pinned
+        # refs. This names the framework the committed tree was last built with, so a
+        # dispatch that accepts the defaults reproduces what is published rather than
+        # rewriting it. It sat at v0.4.0 across three releases while the trees moved to
+        # v0.5.0, v0.6.0 and v0.7.0, which made the safe-looking default the one that
+        # would have rewritten every package. Bump it in the same change that republishes.
         description: Framework ref to build with
         type: string
-        default: v0.4.0
+        default: v0.7.0
       dry_run:
         description: Build and show the diff without pushing
         type: boolean