diff --git a/.github/workflows/release-prepare-hotfix.yml b/.github/workflows/release-prepare-hotfix.yml
index 4aeb0bbf182..a324befe659 100644
--- a/.github/workflows/release-prepare-hotfix.yml
+++ b/.github/workflows/release-prepare-hotfix.yml
@@ -36,6 +36,21 @@ jobs:
       - name: install dependencies
         run: pnpm i -F "ledger-live"
 
+      - name: Generate changeset status
+        run: pnpm changeset status --output=changeset-status.json
+
+      - name: Enforce use of patch level changesets only for hotfixes
+        run: |
+          MINOR_MAJOR_CHANGESET_IDS=$(jq -r '.changesets[] | select(.releases[].type == "minor" or .releases[].type == "major") | .id' changeset-status.json)
+          if [ -n "$MINOR_MAJOR_CHANGESET_IDS" ]; then
+            echo "Major/minor changesets found:"
+            echo "$MINOR_MAJOR_CHANGESET_IDS"
+            echo "❌ Hotfixes must use patch level changesets only"
+            exit 1
+          else
+            echo "✅ No major/minor level changesets found."
+          fi
+
       - name: exit prerelease mode
         run: pnpm changeset pre exit