diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e373259..9a2d37f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,14 +30,27 @@ jobs:
         run: pnpm build
 
       - name: Publish to npm
-        run: pnpm publish --no-git-checks --access public
+        run: |
+          # Prereleases MUST NOT land on the `latest` dist-tag, or a plain
+          # `npm install @authorizerdev/authorizer-js` would pull an RC.
+          if [[ "${GITHUB_REF_NAME}" == *-rc.* ]]; then
+            pnpm publish --no-git-checks --access public --tag rc
+          elif [[ "${GITHUB_REF_NAME}" == *-beta.* ]]; then
+            pnpm publish --no-git-checks --access public --tag beta
+          else
+            pnpm publish --no-git-checks --access public
+          fi
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Create GitHub Release
         run: |
+          PRERELEASE=""
+          if [[ "${GITHUB_REF_NAME}" == *-rc.* || "${GITHUB_REF_NAME}" == *-beta.* ]]; then
+            PRERELEASE="--prerelease"
+          fi
           gh release create "${{ github.ref_name }}" \
             --title "${{ github.ref_name }}" \
-            --generate-notes
+            --generate-notes $PRERELEASE
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/package.json b/package.json
index 79517ee..aa9bb6d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@authorizerdev/authorizer-js",
-  "version": "3.2.1",
+  "version": "3.3.0-rc.0",
   "packageManager": "pnpm@8.15.6",
   "author": "Lakhan Samani",
   "license": "MIT",