diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b5eaf0a..00a542b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -136,8 +136,12 @@ jobs:
           git commit -m "Release ${RELEASE_TAG}"
           git tag -a "${RELEASE_TAG}" -m "Release ${RELEASE_TAG}"
 
+      # Scoped to the library. Unscoped, `cargo package` also verifies
+      # `tinywallet-module`, whose path dependency on this crate carries no
+      # version — correct for a crate that is `publish = false` and shipped as
+      # a release artifact, but fatal to a workspace-wide package step.
       - name: Package crate
-        run: cargo package --locked
+        run: cargo package --locked --package tinywallet
 
       - name: Push release commit and tag
         env:
@@ -148,7 +152,7 @@ jobs:
           git push origin "${RELEASE_TAG}"
 
       - name: Publish to crates.io
-        run: cargo publish --locked
+        run: cargo publish --locked --package tinywallet
         env:
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}