diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1a200d6..f8c7889 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -107,7 +107,6 @@ jobs:
 
       - name: Build release notes
         if: steps.changes.outputs.src_changed == 'true' && steps.check_release.outputs.exists == 'false'
-        id: notes
         run: |
           TAG="${{ steps.version.outputs.tag }}"
           CHANGELOG_URL="https://huebyte.github.io/EchoHub/changelog/${TAG}.html"
@@ -115,7 +114,6 @@ jobs:
           PREV_TAG=$(git tag --sort=-v:refname | grep -v "^${TAG}$" | head -n 1)
 
           {
-            echo "body<<RELEASE_EOF"
             echo "📋 **[Full Changelog](${CHANGELOG_URL})**"
             echo ""
             echo "---"
@@ -134,15 +132,14 @@ jobs:
             else
               echo "*Version diff: [${TAG}](${REPO}/commits/${TAG})*"
             fi
-            echo "RELEASE_EOF"
-          } >> "$GITHUB_OUTPUT"
+          } > release-notes.md
 
       - name: Create GitHub Release
         if: steps.changes.outputs.src_changed == 'true' && steps.check_release.outputs.exists == 'false'
         run: |
           gh release create "${{ steps.version.outputs.tag }}" \
             --title "EchoHub ${{ steps.version.outputs.tag }}" \
-            --notes "${{ steps.notes.outputs.body }}" \
+            --notes-file release-notes.md \
             EchoHub-Server-win-x64.zip \
             EchoHub-Server-linux-x64.zip \
             EchoHub-Server-osx-x64.zip \
diff --git a/docs/changelog/v0.2.5.md b/docs/changelog/v0.2.5.md
index 45e6b67..bcbbe90 100644
--- a/docs/changelog/v0.2.5.md
+++ b/docs/changelog/v0.2.5.md
@@ -110,6 +110,7 @@
 - Root `nuget.config` added for package source management
 - Terminal.Gui formatting excluded from CI format checks
 - Recursive submodule fetching enabled in CI workflows
+- Release workflow: use `--notes-file` instead of inline `--notes` interpolation to prevent shell expansion of special characters in commit messages
 - `Server:Admins` config array in `appsettings.example.json` for designating admin usernames
 - `Storage:CleanupIntervalHours` and `Storage:RetentionDays` added to `appsettings.example.json`
 - `FakeChannelService` test helper added for IRC unit tests