diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 6b2ea3e..148c5e7 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -92,6 +92,18 @@ jobs:
             -DnewVersion="${{ steps.version.outputs.version }}" \
             -DgenerateBackupPoms=false
 
+      - name: Sync skill bundle version pin to the release version
+        # The skill launcher reads SONAR_BUNDLE_VERSION from config.env to
+        # decide which sonar-predictor-dist-<version>.zip to fetch from
+        # Maven Central on first invocation. If config.env is stale, an
+        # installed plugin downloads the wrong bundle. Forcing the pin to
+        # match the tag here removes that trap from every future release.
+        run: |
+          set -euo pipefail
+          CONFIG=plugin/skills/sonar-predictor/config.env
+          sed -i "s|^SONAR_BUNDLE_VERSION=.*|SONAR_BUNDLE_VERSION=${{ steps.version.outputs.version }}|" "${CONFIG}"
+          grep '^SONAR_BUNDLE_VERSION' "${CONFIG}"
+
       - name: Build the source bundle (whole-repo git archive of HEAD)
         # Built BEFORE the deploy: the release profile's build-helper plugin
         # attaches this zip (from the repo root) to the Maven Central upload,
diff --git a/plugin/skills/sonar-predictor/config.env b/plugin/skills/sonar-predictor/config.env
index edc2e2d..f9e0fd9 100644
--- a/plugin/skills/sonar-predictor/config.env
+++ b/plugin/skills/sonar-predictor/config.env
@@ -20,7 +20,7 @@ SONAR_MAVEN_REPO_URL=https://repo1.maven.org/maven2
 
 # Bundle version. Bumped in lockstep with each plugin release. A fork can pin
 # to a vendored / mirrored version without touching the launcher.
-SONAR_BUNDLE_VERSION=0.1.1
+SONAR_BUNDLE_VERSION=0.1.3
 
 # --- Java runtime --------------------------------------------------------------