diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index f311ec0..39036b7 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -8,17 +8,17 @@ image: node:lts
 stages:
     - test
     - build
+    - publish
     - release
 
-before_script:
-    - yarn install --immutable
-
 cache: &global_cache
     paths:
         - .yarn/cache
 
 lint:
     stage: test
+    before_script:
+        - yarn install --immutable
     script:
         - yarn lint
     cache:
@@ -26,6 +26,8 @@ lint:
 
 test:
     stage: test
+    before_script:
+        - yarn install --immutable
     script:
         - yarn test:ci
     cache:
@@ -41,12 +43,13 @@ reuse:
     image:
         name: fsfe/reuse:latest
         entrypoint: [""]
-    before_script: []
     script:
         - reuse lint
 
 build:
     stage: build
+    before_script:
+        - yarn install --immutable
     script:
         - yarn build
         - mv dist ds4
@@ -57,6 +60,22 @@ build:
             - ds4
         expire_in: 1 week
 
+publish-artifacts:
+    image: alpine:latest
+    stage: publish
+    before_script:
+        - apk update
+        - apk add zip curl
+    script: |
+        ls ds4
+        zip ds4.zip ds4
+        curl --header "JOB-TOKEN: $CI_JOB_TOKEN" --upload-file ds4.zip "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/ds4/$CI_COMMIT_TAG/ds4.zip"
+        curl --header "JOB-TOKEN: $CI_JOB_TOKEN" --upload-file ds4/system.json "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/ds4/$CI_COMMIT_TAG/system.json"
+        curl --header "JOB-TOKEN: $CI_JOB_TOKEN" --upload-file ds4/system.json "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/ds4/latest/system.json"
+    rules:
+        - if: $CI_COMMIT_TAG
+          when: manual
+
 .release-template: &release-template
     stage: release
     before_script:
@@ -77,14 +96,12 @@ build:
         git add package.json src/system.json
         git --no-pager diff
         git commit -m "release version ${RELEASE_VERSION}"
-        git tag -f latest
         git tag -f ${RELEASE_VERSION}
         git push origin ci-processing:${CI_BUILD_REF_NAME}
-        git push origin latest -f
         git push origin ${RELEASE_VERSION}
-    only:
-        - master
-    when: manual
+    rules:
+        - if: "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH"
+          when: manual
 
 release-patch:
     variables:
@@ -100,3 +117,42 @@ release-major:
     variables:
         RELEASE_TYPE: major
     <<: *release-template
+
+bump-latest-tag:
+    stage: release
+    image: alpine/git:latest
+    before_script:
+        - REPOSITORY_URL=$(echo "${CI_REPOSITORY_URL}" | sed -e "s|gitlab-ci-token:.*@|${RELEASE_TOKEN}:${RELEASE_TOKEN_SECRET}@|g")
+        - git remote set-url origin $REPOSITORY_URL
+        - git config user.name $GITLAB_USER_LOGIN
+        - git config user.email $GITLAB_USER_EMAIL
+    script: |
+        git tag -f latest
+        git push origin latest -f
+    rules:
+        - if: $CI_COMMIT_TAG
+          when: manual
+        - if: '$CI_COMMIT_TAG =~ /^[0-9]+\.[0-9]+\.[0-9]+$/'
+
+release:
+    stage: release
+    image: registry.gitlab.com/gitlab-org/release-cli:latest
+    script:
+        - echo 'release job'
+    rules:
+        - if: $CI_COMMIT_TAG
+          when: manual
+        - if: '$CI_COMMIT_TAG =~ /^[0-9]+\.[0-9]+\.[0-9]+$/'
+    release:
+        tag_name: $CI_COMMIT_TAG
+        description: $CI_COMMIT_TAG
+        assets:
+            links:
+                - name: "ds4.zip"
+                  url: "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/ds4/$CI_COMMIT_TAG/ds4.zip"
+                  link_type: package
+                  filepath: /ds4.zip
+                - name: "system.json"
+                  url: "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/ds4/$CI_COMMIT_TAG/system.json"
+                  link_type: runbook
+                  filepath: /system.json