diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index 709a7cd..2f93975 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -37,10 +37,14 @@ jobs:
             RID=$(curl -sf -X POST -H "Authorization: token $GITEA_TOKEN" \
               -H "Content-Type: application/json" \
               "$API/repos/$REPO/releases" \
-              -d "$(jq -nc --arg t "$TAG" '{tag_name:$t,name:$t,draft:false,prerelease:false}')" \
+              -d "$(jq -nc --arg t "$TAG" '{tag_name:$t,name:$t,draft:false,prerelease:false,hide_archive_links:true}')" \
               | jq -r '.id')
           fi
           echo "release id: $RID"
+          # Gitea honors hide_archive_links only on edit, not create — PATCH it
+          # so the auto-generated Source Code (zip/tar.gz) links stay hidden.
+          curl -sf -X PATCH -H "Authorization: token $GITEA_TOKEN" -H "Content-Type: application/json" \
+            "$API/repos/$REPO/releases/$RID" -d '{"hide_archive_links":true}' >/dev/null || true
           # Upload every dist/*.zip. Per-asset failures don't fail the job —
           # we want partial releases to still publish rather than block the
           # whole pipeline on one big file.
diff --git a/Bartender4/CoAAuraConditionals.lua b/Bartender4/CoAAuraConditionals.lua
index a6fec89..a227103 100644
--- a/Bartender4/CoAAuraConditionals.lua
+++ b/Bartender4/CoAAuraConditionals.lua
@@ -129,11 +129,13 @@ refresh:SetScript("OnEvent", function(self, event)
     -- UPDATE_SHAPESHIFT_FORMS spam.
     local sig = currentFormSignature()
     if sig == lastFormSignature then return end
-    lastFormSignature = sig
 
     local mod = Bartender4 and Bartender4.GetModule and Bartender4:GetModule("ActionBars", true)
     if not mod or not mod.actionbars then return end
     for _, bar in pairs(mod.actionbars) do
         if bar and bar.UpdateStates then bar:UpdateStates() end
     end
+    -- Only cache the signature once a refresh actually ran, so an event
+    -- arriving before module init doesn't swallow the next identical one.
+    lastFormSignature = sig
 end)