The create_release job currently needs npm_publish, but should also need deploy_tag as both are really deployments.
create_release
needs
npm_publish
deploy_tag