yarn release publish does not behave as expected

dave@dave-dev:~/sourcegraph/sourcegraph/dev/release (main)$ yarn run release release:publish 3.21.0 --help
yarn run v1.22.4
$ node ./out/release.js release:publish 3.21.0 --help
Created temp directory /tmp/sg-release-sourcegraph-sourcegraph-JnWoRQ
+ git clone --depth 10 git@github.com:sourcegraph/sourcegraph
Cloning into 'sourcegraph'...
remote: Enumerating objects: 5499, done.
remote: Counting objects: 100% (5499/5499), done.
remote: Compressing objects: 100% (4904/4904), done.
remote: Total 5499 (delta 780), reused 2079 (delta 399), pack-reused 0
Receiving objects: 100% (5499/5499), 15.78 MiB | 18.46 MiB/s, done.
Resolving deltas: 100% (780/780), done.
+ cd ./sourcegraph
+ git fetch --depth 10 origin main:main
fatal: Refusing to fetch into current branch refs/heads/main of non-bare repository
+ git checkout main
Already on 'main'
Your branch is up to date with 'origin/main'.
+ find . -type f -name '*.md' '!' -name CHANGELOG.md -exec sed -i -E 's/sourcegraph\/server:[0-9]+\.[0-9]+\.[0-9]+/sourcegraph\/server:3.21.0/g' '{}' +
+ sed -i -E 's/version `[0-9]+\.[0-9]+\.[0-9]+`/version `3.21.0`/g' doc/index.md
+ comby -in-place 'currentReleaseRevspec := ":[1]"' 'currentReleaseRevspec := "v3.21.0"' doc/_resources/templates/document.html
+ comby -in-place 'latestReleaseKubernetesBuild = newBuild(":[1]")' 'latestReleaseKubernetesBuild = newBuild("3.21.0")' cmd/frontend/internal/app/updatecheck/handler.go
+ comby -in-place 'latestReleaseDockerServerImageBuild = newBuild(":[1]")' 'latestReleaseDockerServerImageBuild = newBuild("3.21.0")' cmd/frontend/internal/app/updatecheck/handler.go
+ git add :/
+ git commit -a -m 'Update latest release to 3.21.0'
[main bb8c03f] Update latest release to 3.21.0
 13 files changed, 17 insertions(+), 17 deletions(-)
+ git push origin HEAD:publish-3.21.0
Enumerating objects: 55, done.
Counting objects: 100% (55/55), done.
Delta compression using up to 6 threads
Compressing objects: 100% (28/28), done.
Writing objects: 100% (28/28), 2.02 KiB | 690.00 KiB/s, done.
Total 28 (delta 26), reused 0 (delta 0)
remote: Resolving deltas: 100% (26/26), completed with 26 local objects.
remote:
remote: Create a pull request for 'publish-3.21.0' on GitHub by visiting:
remote:      https://github.com/sourcegraph/sourcegraph/pull/new/publish-3.21.0
remote:
To github.com:sourcegraph/sourcegraph
 * [new branch]      HEAD -> publish-3.21.0
Created temp directory /tmp/sg-release-sourcegraph-deploy-sourcegraph-D1wSFU
Base 1.1 does not exist
+ git clone --depth 10 git@github.com:sourcegraph/deploy-sourcegraph
Cloning into 'deploy-sourcegraph'...
remote: Enumerating objects: 550, done.
remote: Counting objects: 100% (550/550), done.
remote: Compressing objects: 100% (353/353), done.
remote: Total 550 (delta 284), reused 338 (delta 183), pack-reused 0
Receiving objects: 100% (550/550), 181.03 KiB | 6.24 MiB/s, done.
Resolving deltas: 100% (284/284), done.
+ cd ./deploy-sourcegraph
+ git checkout -b 1.1
Switched to a new branch '1.1'
+ go install github.com/slimsag/update-docker-tags
+ .github/workflows/scripts/update-docker-tags.sh 3.21.0
flag provided but not defined: -enforce
update-docker-tags

Usage:
        update-docker-tags [options] < FILE | FOLDER >...

Options:
        --constraint (repeatable) enforce a semver constraint for a given docker image

Examples:

        Update all image tags in a directory:

        $ update-docker-tags dir/

        Update all image tags in the given files and folders, enforcing constraints:

        $ update-docker-tags --constraint=ubuntu=<18.04 --constraint=alpine=<3.10 deployment.yaml dir/
Error: Command failed with exit code 2: bash -c set -ex

                .github/workflows/scripts/update-docker-tags.sh 3.21.0;
    at makeError (/home/dave/sourcegraph/sourcegraph/node_modules/execa/lib/error.js:59:11)
    at handlePromise (/home/dave/sourcegraph/sourcegraph/node_modules/execa/index.js:114:26)
    at processTicksAndRejections (internal/process/task_queues.js:93:5)
    at async createBranchWithChanges (/home/dave/sourcegraph/sourcegraph/dev/release/out/github.js:193:17)
    at async Object.createChangesets (/home/dave/sourcegraph/sourcegraph/dev/release/out/github.js:134:9)
    at async Object.run (/home/dave/sourcegraph/sourcegraph/dev/release/out/release.js:269:13)
    at async /home/dave/sourcegraph/sourcegraph/dev/release/out/release.js:349:13
    at async Promise.all (index 0)
    at async run (/home/dave/sourcegraph/sourcegraph/dev/release/out/release.js:345:5)
    at async main (/home/dave/sourcegraph/sourcegraph/dev/release/out/release.js:370:5) {
  shortMessage: 'Command failed with exit code 2: bash -c set -ex\n' +
    '\n' +
    '                .github/workflows/scripts/update-docker-tags.sh 3.21.0;',
  command: 'bash -c set -ex\n' +
    '\n' +
    '                .github/workflows/scripts/update-docker-tags.sh 3.21.0;',
  exitCode: 2,
  signal: undefined,
  signalDescription: undefined,
  stdout: undefined,
  stderr: undefined,
  failed: true,
  timedOut: false,
  isCanceled: false,
  killed: false
}
Done in 15.84s.
dave@dave-dev:~/sourcegraph/sourcegraph/dev/release (main)$