e.g. tag v1 is automatically updated when tag v1.0.1 is published maybe we should also automate publishing of x.y.z tags from CI Should we protect the `v1` branch? Maybe we can apply for the semver thingy. Maybe use [release-please](https://github.com/googleapis/release-please) (not -plz)