diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9dad84fb8..86f2542ac 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -144,6 +144,9 @@ jobs:
     env:
       CARGO_INCREMENTAL: "0"
       RUSTC_WRAPPER: sccache
+      # The GTK plugin wrapper removes these after its own deployment pass,
+      # while linuxdeploy must also exclude them from its later dependency pass.
+      LINUXDEPLOY_EXCLUDED_LIBRARIES: "libwayland-*.so*;libxkbcommon.so*;libxcb-randr.so*;libxcb-render.so*;libxcb-shm.so*;libXau.so*;libXdmcp.so*"
       # Keep releases working until the shared S3 secrets are configured.
       SCCACHE_GHA_ENABLED: ${{ secrets.SCCACHE_S3_BUCKET == '' && 'true' || 'false' }}
     steps:
diff --git a/scripts/release.test.mjs b/scripts/release.test.mjs
index 756dd65fd..827f37249 100644
--- a/scripts/release.test.mjs
+++ b/scripts/release.test.mjs
@@ -185,6 +185,10 @@ test("Linux releases pin the Wayland-capable AppImage bundler before upload", ()
   assert.ok(prepareStep < buildStep);
   assert.ok(buildStep < verifyStep);
   assert.match(workflow, /XDG_CACHE_HOME: \$\{\{ runner\.temp \}\}\/dbx-tauri-cache/);
+  assert.match(
+    workflow,
+    /LINUXDEPLOY_EXCLUDED_LIBRARIES: "libwayland-\*\.so\*;libxkbcommon\.so\*;libxcb-randr\.so\*;libxcb-render\.so\*;libxcb-shm\.so\*;libXau\.so\*;libXdmcp\.so\*"/,
+  );
   assert.match(setup, /tauri_fix_commit=8e7028331ad37ac2db74d4ec20e66be5cacf2c40/);
   assert.match(setup, /linuxdeploy_revision=07333c6/);
   assert.match(setup, /36a2d7e274d12e1050d0e9ecfe11d339ed54720b2bec464c286d53f8b07f5c62/);