diff --git a/.github/workflows/migrations.yml b/.github/workflows/migrations.yml
index 359057e28a2f..831fdbffe40d 100644
--- a/.github/workflows/migrations.yml
+++ b/.github/workflows/migrations.yml
@@ -75,3 +75,33 @@ jobs:
         with:
           githubToken: ${{ secrets.GITHUB_TOKEN }}
           migration: ${{ steps.file.outputs.added }}
+
+  upgrade-test:
+    name: Upgrade Test
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
+    needs: did-migration-change
+    if: ${{ needs.did-migration-change.outputs.modified == 'true' || needs.did-migration-change.outputs.added == 'true' }}
+    steps:
+      - name: Get latest release tag
+        id: latest_release
+        run: echo "tag=$(gh release list --json tagName,isLatest --jq '.[] | select(.isLatest)|.tagName')" >> "$GITHUB_OUTPUT"
+        env:
+          GH_TOKEN: ${{ github.token }}
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          ref: ${{ steps.latest_release.outputs.tag }}
+      - name: Setup sentry env
+        uses: ./.github/actions/setup-sentry
+        with:
+          mode: migrations
+      - name: Apply migrations
+        run: |
+          sentry upgrade --noinput
+      # Checkout the current ref
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          clean: false
+      - name: Apply migrations again to test upgrade path
+        run: |
+          sentry upgrade --noinput
diff --git a/.github/workflows/self-hosted.yml b/.github/workflows/self-hosted.yml
index 3b33c9556ec7..24d1e2f01f10 100644
--- a/.github/workflows/self-hosted.yml
+++ b/.github/workflows/self-hosted.yml
@@ -91,6 +91,7 @@ jobs:
           ghcr: true
           tag_nightly: false
           tag_latest: false
+          publish_on_pr: ${{ github.event.pull_request.author_association == 'OWNER' || github.event.pull_request.author_association == 'MEMBER' }}
 
   assemble:
     needs: [self-hosted]