diff --git a/.github/workflows/rust-release.yml b/.github/workflows/rust-release.yml
index 3fc99ac71b..5230d40992 100644
--- a/.github/workflows/rust-release.yml
+++ b/.github/workflows/rust-release.yml
@@ -1775,13 +1775,10 @@ jobs:
             --prerelease="$PRERELEASE"
           )
           if [[ "$exists" == false ]]; then
-            # Prereleases must be created directly to keep prereleased events.
-            draft=true
-            if [[ "$PRERELEASE" == true ]]; then
-              draft=false
-            fi
+            # Keep stable releases and prereleases private until all uploads succeed.
+            # Publishing a draft emits published rather than prereleased events.
             gh release create "$GITHUB_REF_NAME" "${release_args[@]}" \
-              --draft="$draft" --verify-tag --latest=false
+              --draft=true --verify-tag --latest=false
           fi
 
           mapfile -d '' assets < <(find dist -type f -print0 | sort -z)