diff --git a/.forgejo/workflows/release.yml b/.forgejo/workflows/release.yml
index dc813fbe..9306d087 100644
--- a/.forgejo/workflows/release.yml
+++ b/.forgejo/workflows/release.yml
@@ -222,6 +222,28 @@ jobs:
           API_BASE="${GITHUB_API_URL%/}"
           API_BASE="${API_BASE%/api/v1}"
 
+          # Pas de python3, pas de jq dans l'image runner. On génère
+          # le JSON à la main : escaping minimal des caractères
+          # spéciaux JSON dans les chaînes (\\, \", \n, \r, \t).
+          # Suffisant pour un CHANGELOG.md bien formé.
+          json_escape() {
+            local s="$1"
+            s="${s//\\/\\\\}"
+            s="${s//\"/\\\"}"
+            s="${s//$'\n'/\\n}"
+            s="${s//$'\r'/\\r}"
+            s="${s//$'\t'/\\t}"
+            printf '%s' "$s"
+          }
+
+          # Extraction d'un champ JSON scalaire (string ou number) depuis
+          # un fichier. Utilise sed basique, suffisant pour les champs
+          # id / tag_name que l'API renvoie en clair.
+          json_field() {
+            local file="$1" field="$2"
+            sed -n "s/.*\"$field\"[[:space:]]*:[[:space:]]*\"\?\([^\",}]*\)\"\?.*/\1/p" "$file" | head -1
+          }
+
           # 1. Vérifier si la release existe déjà pour ce tag.
           echo "::group::Check existing release for tag $TAG"
           HTTP=$(curl -sS -o /tmp/existing.json -w '%{http_code}' \
@@ -231,17 +253,16 @@ jobs:
           echo "GET releases/tags/$TAG -> HTTP $HTTP"
           EXISTING_ID=""
           if [[ "$HTTP" == "200" ]]; then
-            EXISTING_ID=$(python3 -c "import json,sys; print(json.load(open('/tmp/existing.json')).get('id',''))" 2>/dev/null || true)
+            EXISTING_ID=$(json_field /tmp/existing.json id)
             echo "Existing release id: ${EXISTING_ID:-none}"
           fi
           echo "::endgroup::"
 
           # 2. Créer ou mettre à jour la release.
-          # On utilise python3 pour générer le body JSON proprement
-          # (jq n'est pas garanti dans l'image runner).
           if [[ -n "$EXISTING_ID" ]]; then
             echo "::group::Update release id=$EXISTING_ID"
-            BODY=$(IS_PRERELEASE="$IS_PRERELEASE" RELEASE_BODY="$RELEASE_BODY" python3 -c 'import json,os; print(json.dumps({"body":os.environ["RELEASE_BODY"],"prerelease":os.environ["IS_PRERELEASE"].lower()=="true"}))')
+            BODY=$(printf '{"body":"%s","prerelease":%s}' \
+              "$(json_escape "$RELEASE_BODY")" "$IS_PRERELEASE")
             HTTP=$(curl -sS -o /tmp/release.json -w '%{http_code}' \
               -X PATCH \
               -H "Authorization: token $GITHUB_TOKEN" \
@@ -253,7 +274,11 @@ jobs:
             echo "::endgroup::"
           else
             echo "::group::Create release"
-            BODY=$(IS_PRERELEASE="$IS_PRERELEASE" RELEASE_BODY="$RELEASE_BODY" TAG="$TAG" python3 -c 'import json,os; print(json.dumps({"tag_name":os.environ["TAG"],"name":os.environ["TAG"],"body":os.environ["RELEASE_BODY"],"prerelease":os.environ["IS_PRERELEASE"].lower()=="true"}))')
+            BODY=$(printf '{"tag_name":"%s","name":"%s","body":"%s","prerelease":%s}' \
+              "$(json_escape "$TAG")" \
+              "$(json_escape "$TAG")" \
+              "$(json_escape "$RELEASE_BODY")" \
+              "$IS_PRERELEASE")
             HTTP=$(curl -sS -o /tmp/release.json -w '%{http_code}' \
               -X POST \
               -H "Authorization: token $GITHUB_TOKEN" \
@@ -271,7 +296,7 @@ jobs:
             exit 1
           fi
 
-          RELEASE_ID=$(python3 -c "import json; print(json.load(open('/tmp/release.json'))['id'])")
+          RELEASE_ID=$(json_field /tmp/release.json id)
           echo "Release id=$RELEASE_ID"
 
           # 3. Upload l'APK en asset.