The deployment step in the build, where the jar files are copied to Sonatype, should first check that the build version (derived from git describe matches the project version (from build.gradle), e.g. if the project version is 3.8.0-beta3, then the build version must also be 3.8.0-beta3.

This will prevent accidentally deploying to Sonatype from a git tree that is not identical to the tagged version.