diff --git a/.github/workflows/publish-next.yml b/.github/workflows/publish-next.yml
index 8ef5f42..204a20f 100644
--- a/.github/workflows/publish-next.yml
+++ b/.github/workflows/publish-next.yml
@@ -14,7 +14,7 @@ concurrency:
 jobs:
   publish-next:
     # Skip release-please's own release commits — those publish `latest` via release-please.yml
-    if: ${{ !startsWith(github.event.head_commit.message, 'chore(main): release') }}
+    if: "${{ !startsWith(github.event.head_commit.message, 'chore(main): release') }}"
     runs-on: ubuntu-latest
     permissions:
       contents: read