Run scripts/release.sh if you're doing a major train bump, or scripts/release.sh patch if you're tagging a patch release.
scripts/release.sh
scripts/release.sh patch
Do a git log, check everything looks ok (including the changelog).
git log
git push the train branch and the tag.
git push