diff --git a/.gitea/workflows/build-ns7zip.yml b/.gitea/workflows/build-ns7zip.yml
index 91e1113..1b40648 100644
--- a/.gitea/workflows/build-ns7zip.yml
+++ b/.gitea/workflows/build-ns7zip.yml
@@ -55,7 +55,10 @@ jobs:
   # Requires a GITEA_TOKEN secret with repo write permissions.
   release:
     needs: build
-    if: github.ref_type == 'tag'
+    # Tag pushes only. Explicit ${{ }} + event gate: a bare
+    # `if: github.ref_type == 'tag'` can leave the job stuck "blocked"
+    # (instead of skipped) on Gitea for workflow_dispatch runs.
+    if: ${{ github.event_name == 'push' && github.ref_type == 'tag' }}
     runs-on: windows-build
 
     steps: