diff --git a/scripts/publish_new_release.py b/scripts/publish_new_release.py
index e67d05bb..5d88179b 100644
--- a/scripts/publish_new_release.py
+++ b/scripts/publish_new_release.py
@@ -59,7 +59,11 @@ def ensure_up_to_date_with_remote() -> None:
 def build_frontend() -> None:
     # Note: `shell=True` is required on Windows because `npm` is a `.cmd` file
     # and not a `.exe`
-    subprocess.run(["npm", "run", "build"], shell=True, check=True)
+    subprocess.run(
+        ["npm", "run", "build"],
+        shell=sys.platform == "win32",
+        check=True,
+    )
 
 
 def ensure_tests_pass() -> None: