diff --git a/.forgejo/workflows/release.yml b/.forgejo/workflows/release.yml
index ccec1d2..1118d8c 100644
--- a/.forgejo/workflows/release.yml
+++ b/.forgejo/workflows/release.yml
@@ -81,12 +81,14 @@ jobs:
           Xvfb :99 -screen 0 1024x768x16 &
           sleep 1
           wineboot --init >/dev/null 2>&1 || true
-          # Download Inno Setup 6.4 — pinned to a known-good build to keep
-          # builds reproducible. Using upstream installer is more robust
-          # against link rot than third-party redistributions.
-          INNO_VERSION="6.4.0"
+          # Download Inno Setup — pinned to a known-good build for
+          # reproducibility. Upstream now hosts releases on GitHub
+          # (jrsoftware/issrc). Old URL https://files.jrsoftware.org/is/6/
+          # returns 404 since the redistribution layout changed.
+          INNO_VERSION="6.7.1"
+          INNO_TAG="is-6_7_1"
           curl -fsSL -o /tmp/innosetup.exe \
-            "https://files.jrsoftware.org/is/6/innosetup-${INNO_VERSION}.exe"
+            "https://github.com/jrsoftware/issrc/releases/download/${INNO_TAG}/innosetup-${INNO_VERSION}.exe"
           # Silent install. /CURRENTUSER avoids needing admin in Wine.
           xvfb-run -a wine /tmp/innosetup.exe /VERYSILENT /SUPPRESSMSGBOXES /CURRENTUSER /NORESTART \
             /DIR="C:\\InnoSetup" \