diff --git a/.forgejo/workflows/extension.yml b/.forgejo/workflows/extension.yml
index dc54c95..ce35f37 100644
--- a/.forgejo/workflows/extension.yml
+++ b/.forgejo/workflows/extension.yml
@@ -2,7 +2,14 @@ name: extension
 on:
   push:
     branches: [dev, main]
-    paths: ['extension/**']
+    # Self-retriggering: include the workflow file itself so edits to
+    # this workflow (filename-glob fixes, env tweaks, etc.) run the
+    # sign-and-publish dance on next push without needing a manual
+    # Forgejo dispatch. Side-effect commits (`ext: publish signed XPI`)
+    # only touch frontend/public/extension/ so they DON'T re-trigger.
+    paths:
+      - 'extension/**'
+      - '.forgejo/workflows/extension.yml'
   workflow_dispatch:
 
 jobs: