diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0f6eb9fa..a265d18c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,10 +7,6 @@ on:
     branches:
       - main
 
-concurrency:
-  group: release-${{ github.ref_name }}
-  cancel-in-progress: false
-
 permissions: {}
 
 env:
@@ -77,6 +73,10 @@ jobs:
       contents: read
     needs: check
     if: needs.check.outputs.workflow == 'pull-request'
+    # Shares one group with `release`: both push the release branch.
+    concurrency:
+      group: release-branch-${{ github.ref_name }}
+      cancel-in-progress: false
     steps:
       # Use a GitHub App installation token (not GITHUB_TOKEN) so the push to the
       # release branch triggers downstream `pull_request` events on the release PR.
@@ -147,6 +147,10 @@ jobs:
       id-token: write
     needs: check
     if: needs.check.outputs.workflow == 'release'
+    # Shares one group with `pull-request`: both push the release branch.
+    concurrency:
+      group: release-branch-${{ github.ref_name }}
+      cancel-in-progress: false
     steps:
       - name: Generate token
         id: generate_token