diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4ec8ffe..ccd5b25 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -158,6 +158,16 @@ jobs:
         env:
           ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
 
+      - name: Pin Maven to 3.9.16
+        # Maven 3.10+ breaks central-publishing-maven-plugin bundling (upstream bug)
+        run: |
+          MAVEN_VERSION=3.9.16
+          curl -fsSL -o /tmp/maven.tar.gz "https://archive.apache.org/dist/maven/maven-3/${MAVEN_VERSION}/binaries/apache-maven-${MAVEN_VERSION}-bin.tar.gz"
+          curl -fsSL -o /tmp/maven.tar.gz.sha512 "https://archive.apache.org/dist/maven/maven-3/${MAVEN_VERSION}/binaries/apache-maven-${MAVEN_VERSION}-bin.tar.gz.sha512"
+          echo "$(cat /tmp/maven.tar.gz.sha512)  /tmp/maven.tar.gz" | sha512sum -c -
+          sudo tar -xzf /tmp/maven.tar.gz -C /opt
+          echo "/opt/apache-maven-${MAVEN_VERSION}/bin" >> $GITHUB_PATH
+
       - name: Update the POM version.
         run: mvn -B versions:set -DnewVersion="$RELEASE_VERSION" --file pom.xml -DskipTests