module SeleniumRake
   BINDINGS = %w[ruby python javascript java dotnet].freeze
-...
+  LANGUAGE_TASK_MAP = {
+    'ruby' => 'rb',
+    'python' => 'py',
+    'javascript' => 'javascript',
+    'java' => 'java',
+    'dotnet' => 'dotnet',
+    'all' => 'all'
+  }.freeze
+
+  class << self
+    attr_accessor :git
+  end
+
+  # Parse a release tag like "selenium-4.28.0" or "selenium-4.28.1-ruby"
+  # Returns { version:, language:, task_language:, patch: } where language defaults to 'all'
   def self.parse_tag(tag)
     pattern = /^selenium-(\d+\.\d+\.\d+)(?:-(#{BINDINGS.join('|')}))?$/
     match = tag&.match(pattern)
     raise "Invalid tag format: #{tag}" unless match
 
     version = match[1]
     language = match[2] || 'all'
+    task_language = LANGUAGE_TASK_MAP.fetch(language)
     patch = version.split('.')[2].to_i
-...
-    {version: version, language: language, patch: patch}
+
+    if patch.positive? && language == 'all'
+      raise "Patch releases must specify a language (e.g., selenium-#{version}-ruby)"
+    end
+    raise 'Full releases (X.Y.0) cannot have a language suffix' if patch.zero? && language != 'all'
+
+    {version: version, language: language, task_language: task_language, patch: patch}
   end

 task :release_updates, [:tag, :channel] do |_task, arguments|
   parsed = SeleniumRake.parse_tag(arguments[:tag])
   version = parsed[:version]
-  language = parsed[:language]
+  language = parsed[:task_language]
 
   if parsed[:patch].zero?
     Rake::Task['update_browsers'].invoke(arguments[:channel])
     Rake::Task['update_cdp'].invoke(arguments[:channel])
     Rake::Task['update_manager'].invoke
     Rake::Task['update_multitool'].invoke
     Rake::Task['authors'].invoke
     Rake::Task['rust:version'].invoke(version)
     Rake::Task['rust:update'].invoke
     Rake::Task['rust:changelogs'].invoke
   end
 
   Rake::Task["#{language}:version"].invoke(version)
   Rake::Task["#{language}:update"].invoke
   Rake::Task["#{language}:changelogs"].invoke
 end

 publish:
   name: Build and Publish ${{ matrix.language }}
   needs: [parse-tag, get-approval]
+  if: ${{ needs.parse-tag.outputs.language == 'all' || needs.parse-tag.outputs.language == matrix.language }}
   strategy:
     fail-fast: false
     matrix:
       language: [java, python, ruby, dotnet, javascript]
   uses: ./.github/workflows/bazel.yml
   with:
     name: Publish ${{ matrix.language }}
     gpg-sign: ${{ matrix.language == 'java' }}
-    run: ${{ (needs.parse-tag.outputs.language == 'all' || needs.parse-tag.outputs.language == matrix.language) && format('./go {0}:release', matrix.language) || 'echo skipping' }}
+    run: ./go ${{ matrix.language }}:release
     artifact-name: release-packages-${{ matrix.language }}
     artifact-path: build/dist/*.*
   secrets: inherit

 - name: Extract tag from input or PR branch
   id: extract
   env:
     EVENT_NAME: ${{ github.event_name }}
     INPUT_TAG: ${{ inputs.tag }}
     PR_HEAD_REF: ${{ github.event.pull_request.head.ref }}
   run: |
-    if [ "$EVENT_NAME" == "workflow_dispatch" ]; then
-      TAG="$INPUT_TAG"
+    set -euo pipefail
+
+    if [ "$EVENT_NAME" = "workflow_dispatch" ]; then
+      TAG="${INPUT_TAG//[[:space:]]/}"
     else
-      # Extract tag from branch name: release-preparation-selenium-4.28.1-ruby -> selenium-4.28.1-ruby
-      TAG="${PR_HEAD_REF#release-preparation-}"
+      case "$PR_HEAD_REF" in
+        release-preparation-*) TAG="${PR_HEAD_REF#release-preparation-}" ;;
+        *) echo "::error::Unexpected PR branch name: '$PR_HEAD_REF'"; exit 1 ;;
+      esac
     fi
+
+    TAG="${TAG//[[:space:]]/}"
+    if [ -z "$TAG" ]; then
+      echo "::error::Missing release tag"
+      exit 1
+    fi
+
     echo "tag=$TAG" >> "$GITHUB_OUTPUT"

+LANG_RE='ruby|python|javascript|java|dotnet'
+
 # Validate tag format: selenium-X.Y.Z or selenium-X.Y.Z-lang
-if [[ ! "$TAG" =~ ^selenium-[0-9]+\.[0-9]+\.[0-9]+(-(ruby|python|javascript|java|dotnet))?$ ]]; then
+if [[ ! "$TAG" =~ ^selenium-[0-9]+\.[0-9]+\.[0-9]+(-(${LANG_RE}))?$ ]]; then
   echo "::error::Invalid tag format: '$TAG'. Expected selenium-X.Y.Z or selenium-X.Y.Z-lang (ruby, python, javascript, java, dotnet)"
   exit 1
 fi
 
 # Extract version
-VERSION=$(echo "$TAG" | sed -E 's/^selenium-([0-9]+\.[0-9]+\.[0-9]+)(-(ruby|python|javascript|java|dotnet))?$/\1/')
+VERSION=$(echo "$TAG" | sed -E "s/^selenium-([0-9]+\.[0-9]+\.[0-9]+)(-(${LANG_RE}))?$/\1/")
 PATCH=$(echo "$VERSION" | cut -d. -f3)
 
 # Extract language suffix
-if [[ "$TAG" =~ -(ruby|python|javascript|java|dotnet)$ ]]; then
+if [[ "$TAG" =~ -(${LANG_RE})$ ]]; then
   LANG_SUFFIX="${BASH_REMATCH[1]}"
 else
   LANG_SUFFIX=""
 fi

 def self.parse_tag(tag)
+  tag = tag.to_s.strip
+  raise 'Missing required tag' if tag.empty?
+
   pattern = /^selenium-(\d+\.\d+\.\d+)(?:-(#{BINDINGS.join('|')}))?$/
-  match = tag&.match(pattern)
+  match = tag.match(pattern)
   raise "Invalid tag format: #{tag}" unless match
 
   version = match[1]
   language = match[2] || 'all'
-  patch = version.split('.')[2].to_i
+  patch = version.split('.').fetch(2).to_i
 
   if patch.positive? && language == 'all'
     raise "Patch releases must specify a language (e.g., selenium-#{version}-ruby)"
   end
   raise 'Full releases (X.Y.0) cannot have a language suffix' if patch.zero? && language != 'all'
 
   {version: version, language: language, patch: patch}
 end

 publish:
   name: Build and Publish ${{ matrix.language }}
   needs: [prepare, get-approval]
-  if: needs.prepare.outputs.language == 'all' || needs.prepare.outputs.language == matrix.language
+  if: |
+    needs.prepare.outputs.language == 'all' ||
+    (needs.prepare.outputs.language == 'python' && matrix.language == 'py') ||
+    (needs.prepare.outputs.language == 'ruby' && matrix.language == 'rb') ||
+    (needs.prepare.outputs.language == 'javascript' && matrix.language == 'node') ||
+    needs.prepare.outputs.language == matrix.language
   strategy:
     fail-fast: false
     matrix:
-      language: [java, python, ruby, dotnet, javascript]
+      language: [java, py, rb, dotnet, node]
   uses: ./.github/workflows/bazel.yml
   with:
     name: Publish ${{ matrix.language }}
     gpg-sign: ${{ matrix.language == 'java' }}
     run: ./go ${{ matrix.language }}:release
     artifact-name: release-packages-${{ matrix.language }}
     artifact-path: build/dist/*.*

-# Extract language suffix (rake namespace aliases allow full names)
+# Extract language suffix (map tag suffixes to internal task namespaces)
 case "$TAG" in
-  *-javascript) LANG="javascript" ;;
-  *-python) LANG="python" ;;
-  *-ruby) LANG="ruby" ;;
+  *-javascript) LANG="node" ;;
+  *-python) LANG="py" ;;
+  *-ruby) LANG="rb" ;;
   *-java) LANG="java" ;;
   *-dotnet) LANG="dotnet" ;;
   *) LANG="all" ;;
 esac

 file = 'java/version.bzl'
 text = File.read(file).gsub(old_version, new_version)
 File.open(file, 'w') { |f| f.puts text }
+
+Rake::Task['java:update'].invoke
 SeleniumRake.git.add(file)
 
-Rake::Task['java:update'].invoke
-

 run: |
+  set -euo pipefail
+
   TAG="${{ inputs.tag }}"
   TAG="${TAG//[[:space:]]/}"
 
   # Validate tag format: selenium-X.Y.Z or selenium-X.Y.Z-lang
   if [[ ! "$TAG" =~ ^selenium-[0-9]+\.[0-9]+\.[0-9]+(-[a-z]+)?$ ]]; then
     echo "::error::Invalid tag format: '$TAG'. Expected selenium-X.Y.Z or selenium-X.Y.Z-lang"
     exit 1
   fi
 
   # Extract version (strip 'selenium-' prefix and optional language suffix)
-  VERSION=$(echo "$TAG" | sed -E 's/^selenium-([0-9]+\.[0-9]+\.[0-9]+)(-[a-z]+)?$/\1/')
-  PATCH=$(echo "$VERSION" | cut -d. -f3)
+  VERSION="${TAG#selenium-}"
+  VERSION="${VERSION%-${VERSION##*-}}"
+  PATCH="${VERSION##*.}"

 %w[javascript/selenium-webdriver/package.json javascript/selenium-webdriver/BUILD.bazel].each do |file|
   text = File.read(file).gsub(old_version, new_version)
   File.open(file, 'w') { |f| f.puts text }
+  SeleniumRake.git.add(file)
 end
 
 Rake::Task['node:update'].invoke

 - name: Extract and parse tag
   id: parse
   env:
     EVENT_NAME: ${{ github.event_name }}
     INPUT_TAG: ${{ inputs.tag }}
     PR_HEAD_REF: ${{ github.event.pull_request.head.ref }}
   run: |
     if [ "$EVENT_NAME" == "workflow_dispatch" ]; then
       TAG="$INPUT_TAG"
     else
       # Extract tag from branch name: release-preparation-selenium-4.28.1-ruby -> selenium-4.28.1-ruby
       TAG=$(echo "$PR_HEAD_REF" | sed 's/^release-preparation-//')
     fi
 
     # Extract version
     VERSION=$(echo "$TAG" | grep -oE '[0-9]+\.[0-9]+\.[0-9]+')
     PATCH=$(echo "$VERSION" | cut -d. -f3)
 
     # Extract language suffix
     if [[ "$TAG" =~ -([a-z]+)$ ]]; then
       LANG_SUFFIX="${BASH_REMATCH[1]}"
     else
       LANG_SUFFIX=""
     fi
 
     # Patch releases must have a language suffix
     if [[ "$PATCH" -gt 0 && -z "$LANG_SUFFIX" ]]; then
       echo "::error::Patch releases must specify a language (e.g., selenium-${VERSION}-ruby)"
       exit 1
     fi
 
+    # Full releases (X.Y.0) must not have a language suffix
+    if [[ "$PATCH" -eq 0 && -n "$LANG_SUFFIX" ]]; then
+      echo "::error::Full releases (X.Y.0) cannot have a language suffix"
+      exit 1
+    fi
+
     # Validate language suffix (rake namespace aliases allow full names)
     case "$LANG_SUFFIX" in
       ruby|python|javascript|java|dotnet)
         LANGUAGE="$LANG_SUFFIX"
         ;;
       "")
         LANGUAGE="all"
         ;;
       *)
         echo "::error::Invalid language suffix: '$LANG_SUFFIX'. Expected ruby, python, javascript, java, or dotnet"
         exit 1
         ;;
     esac
 
     echo "tag=$TAG" >> "$GITHUB_OUTPUT"
     echo "version=$VERSION" >> "$GITHUB_OUTPUT"
     echo "language=$LANGUAGE" >> "$GITHUB_OUTPUT"

 - name: Parse tag
   id: parse
   shell: bash
   run: |
-    TAG="${{ inputs.tag }}"
-    TAG="${TAG//[[:space:]]/}"
+    ./scripts/parse-release-tag.sh "${{ inputs.tag }}" >> "$GITHUB_OUTPUT"
 
-    # Validate tag format: selenium-X.Y.Z or selenium-X.Y.Z-lang
-    if [[ ! "$TAG" =~ ^selenium-[0-9]+\.[0-9]+\.[0-9]+(-[a-z]+)?$ ]]; then
-      echo "::error::Invalid tag format: '$TAG'. Expected selenium-X.Y.Z or selenium-X.Y.Z-lang"
-      exit 1
-    fi
-
-    # Extract version (strip 'selenium-' prefix and optional language suffix)
-    VERSION=$(echo "$TAG" | sed -E 's/^selenium-([0-9]+\.[0-9]+\.[0-9]+)(-[a-z]+)?$/\1/')
-    PATCH=$(echo "$VERSION" | cut -d. -f3)
-
-    # Extract language suffix (default to 'all' if no suffix)
-    if [[ "$TAG" =~ -([a-z]+)$ ]]; then
-      LANG_SUFFIX="${BASH_REMATCH[1]}"
-    else
-      LANG_SUFFIX=""
-    fi
-
-    # Patch releases must have a language suffix
-    if [[ "$PATCH" -gt 0 && -z "$LANG_SUFFIX" ]]; then
-      echo "::error::Patch releases must specify a language (e.g., selenium-${VERSION}-ruby)"
-      exit 1
-    fi
-
-    # Full releases (X.Y.0) must not have a language suffix
-    if [[ "$PATCH" -eq 0 && -n "$LANG_SUFFIX" ]]; then
-      echo "::error::Full releases (X.Y.0) cannot have a language suffix"
-      exit 1
-    fi
-
-    # Validate language suffix (rake namespace aliases allow full names)
-    case "$LANG_SUFFIX" in
-      ruby|python|javascript|java|dotnet)
-        LANGUAGE="$LANG_SUFFIX"
-        ;;
-      "")
-        LANGUAGE="all"
-        ;;
-      *)
-        echo "::error::Invalid language suffix: '$LANG_SUFFIX'. Expected ruby, python, javascript, java, or dotnet"
-        exit 1
-        ;;
-    esac
-
-    echo "tag=$TAG" >> "$GITHUB_OUTPUT"
-    echo "version=$VERSION" >> "$GITHUB_OUTPUT"
-    echo "language=$LANGUAGE" >> "$GITHUB_OUTPUT"
-