diff --git a/.gitea/workflows/build-windows-release.yml b/.gitea/workflows/build-windows-release.yml
new file mode 100644
index 0000000..047569d
--- /dev/null
+++ b/.gitea/workflows/build-windows-release.yml
@@ -0,0 +1,211 @@
+name: Build Windows Release
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  build-windows-release:
+    name: Windows x64 Release (MinGW + Qt + OpenCV)
+    runs-on: ubuntu-latest
+    container: fedora:latest
+
+    env:
+      BUILD_TYPE: Release
+      APP_NAME: QtOpenCVImageTool
+      PACKAGE_BASENAME: QtOpenCVImageTool-windows-x64
+
+    steps:
+      - name: Configure Fedora mirror
+        run: |
+          set -euo pipefail
+          sed -e 's|^metalink=|#metalink=|g' \
+              -e 's|^#baseurl=http://download.example/pub/fedora/linux|baseurl=https://mirrors.aliyun.com/fedora|g' \
+              -i /etc/yum.repos.d/fedora*.repo
+          if [ -f /etc/yum.repos.d/fedora-cisco-openh264.repo ]; then
+            sed -i 's|^enabled=1|enabled=0|g' /etc/yum.repos.d/fedora-cisco-openh264.repo
+          fi
+          dnf clean all
+          dnf makecache --refresh -y
+
+      - name: Install dependencies
+        run: |
+          set -euo pipefail
+          dnf install -y \
+            git \
+            curl \
+            jq \
+            zip \
+            unzip \
+            python3 \
+            nodejs \
+            cmake \
+            ninja-build \
+            mingw64-gcc-c++ \
+            mingw64-qt6-qtbase \
+            mingw64-qt6-qtimageformats \
+            mingw64-opencv
+
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Configure
+        run: |
+          cmake -S . -B build-windows -G Ninja \
+            -DCMAKE_TOOLCHAIN_FILE=/usr/share/mingw/toolchain-mingw64.cmake \
+            -DCMAKE_BUILD_TYPE="$BUILD_TYPE" \
+            -DCMAKE_CXX_FLAGS="-isystem /usr/x86_64-w64-mingw32/sys-root/mingw/include/opencv4" \
+            -DOpenCV_DIR=/usr/x86_64-w64-mingw32/sys-root/mingw/lib/cmake/OpenCV
+
+      - name: Build
+        run: cmake --build build-windows --config "$BUILD_TYPE" --parallel
+
+      - name: Package
+        run: |
+          set -euo pipefail
+          root="/usr/x86_64-w64-mingw32/sys-root/mingw"
+          dist="dist-windows/$APP_NAME"
+          rm -rf dist-windows artifacts
+          mkdir -p "$dist/platforms" "$dist/imageformats" artifacts
+
+          cp "build-windows/$APP_NAME.exe" "$dist/"
+          cp "$root/bin/Qt6Core.dll" "$dist/"
+          cp "$root/bin/Qt6Gui.dll" "$dist/"
+          cp "$root/bin/Qt6Widgets.dll" "$dist/"
+          cp "$root/bin/libgcc_s_seh-1.dll" "$dist/"
+          cp "$root/bin/libstdc++-6.dll" "$dist/"
+          cp "$root/bin/libwinpthread-1.dll" "$dist/"
+          cp "$root/lib/qt6/plugins/platforms/qwindows.dll" "$dist/platforms/"
+          cp "$root/lib/qt6/plugins/imageformats/"*.dll "$dist/imageformats/"
+          find "$root/bin" -maxdepth 1 -name "*opencv*.dll" -exec cp -t "$dist/" {} +
+          install -m 0644 readme.md "$dist/readme.md"
+
+          cat > "$dist/README.txt" <<EOF
+          $APP_NAME Windows x64 package
+
+          Usage:
+          1. Extract the whole directory.
+          2. Double-click $APP_NAME.exe to run.
+
+          Do not copy the exe alone. Keep DLL files and Qt plugin directories together.
+          EOF
+
+          short_sha="${GITHUB_SHA::10}"
+          if [ "${GITHUB_REF_TYPE:-}" = "tag" ]; then
+            version="$GITHUB_REF_NAME"
+          else
+            version="build-$short_sha"
+          fi
+
+          package="$PACKAGE_BASENAME-$version.zip"
+          (cd dist-windows && zip -r "../artifacts/$package" "$APP_NAME")
+          sha256sum "artifacts/$package" > "artifacts/$package.sha256"
+          printf 'VERSION=%s\n' "$version" >> "$GITHUB_ENV"
+          printf 'PACKAGE=%s\n' "$package" >> "$GITHUB_ENV"
+
+      - name: Verify package
+        run: |
+          set -euo pipefail
+          test -s "artifacts/$PACKAGE"
+          test -s "artifacts/$PACKAGE.sha256"
+          unzip -l "artifacts/$PACKAGE" | grep -E "$APP_NAME/$APP_NAME.exe" > /dev/null
+          unzip -l "artifacts/$PACKAGE" | grep -E "$APP_NAME/platforms/qwindows.dll" > /dev/null
+          unzip -l "artifacts/$PACKAGE" | grep -E "$APP_NAME/.*opencv.*\.dll" > /dev/null
+          sha256sum -c "artifacts/$PACKAGE.sha256"
+
+      - name: Upload package to Gitea release
+        env:
+          RELEASE_TOKEN: ${{ secrets.RELEASE_TOKEN }}
+        run: |
+          set -euo pipefail
+          token="${RELEASE_TOKEN:-${GITHUB_TOKEN:-}}"
+          if [ -z "$token" ]; then
+            echo "Missing token. Configure RELEASE_TOKEN in repository secrets or enable GITHUB_TOKEN permissions." >&2
+            exit 1
+          fi
+
+          server_url="${GITHUB_SERVER_URL%/}"
+          api_base="$server_url/api/v1/repos/$GITHUB_REPOSITORY"
+          tag_name="$VERSION"
+          if [ "${GITHUB_REF_TYPE:-}" = "tag" ]; then
+            prerelease=false
+            release_name="$GITHUB_REF_NAME"
+          else
+            prerelease=true
+            release_name="$APP_NAME ${GITHUB_SHA::10}"
+          fi
+
+          release_payload=$(jq -n \
+            --arg tag_name "$tag_name" \
+            --arg target_commitish "$GITHUB_SHA" \
+            --arg name "$release_name" \
+            --arg body "Automated Windows x64 build for $APP_NAME." \
+            --argjson prerelease "$prerelease" \
+            '{tag_name:$tag_name,target_commitish:$target_commitish,name:$name,body:$body,draft:false,prerelease:$prerelease}')
+
+          status=$(curl --silent --show-error --location \
+            --header "Authorization: token $token" \
+            --header "Content-Type: application/json" \
+            --write-out "%{http_code}" \
+            --output release.json \
+            --data "$release_payload" \
+            "$api_base/releases")
+
+          if [ "$status" != "200" ] && [ "$status" != "201" ]; then
+            curl --silent --show-error --location \
+              --header "Authorization: token $token" \
+              --output release.json \
+              "$api_base/releases/tags/$tag_name"
+          fi
+
+          release_id=$(jq -r ".id" release.json)
+          if [ -z "$release_id" ] || [ "$release_id" = "null" ]; then
+            echo "Failed to resolve release id." >&2
+            cat release.json >&2
+            exit 1
+          fi
+
+          upload_asset() {
+            local path="$1"
+            local name
+            name=$(basename "$path")
+
+            curl --silent --show-error --location \
+              --header "Authorization: token $token" \
+              "$api_base/releases/$release_id/assets" > assets.json
+
+            jq -r --arg name "$name" '.[] | select(.name == $name) | .id' assets.json | while read -r asset_id; do
+              if [ -n "$asset_id" ]; then
+                curl --silent --show-error --location \
+                  --request DELETE \
+                  --header "Authorization: token $token" \
+                  "$api_base/releases/assets/$asset_id" >/dev/null
+              fi
+            done
+
+            encoded_name=$(python3 -c 'import sys, urllib.parse; print(urllib.parse.quote(sys.argv[1]))' "$name")
+            status=$(curl --silent --show-error --location \
+              --header "Authorization: token $token" \
+              --form "attachment=@$path;filename=$name" \
+              --write-out "%{http_code}" \
+              --output upload-response.json \
+              "$api_base/releases/$release_id/assets?name=$encoded_name")
+
+            if [ "$status" != "200" ] && [ "$status" != "201" ]; then
+              echo "Upload release asset failed, HTTP $status: $name" >&2
+              cat upload-response.json >&2
+              exit 1
+            fi
+            echo "Uploaded release asset: $name"
+          }
+
+          upload_asset "artifacts/$PACKAGE"
+          upload_asset "artifacts/$PACKAGE.sha256"
+          echo "Release assets uploaded to $server_url/$GITHUB_REPOSITORY/releases/tag/$tag_name"
diff --git a/QtOpenCVImageTool.zip b/QtOpenCVImageTool.zip
index 78f45c5..ef62328 100644
Binary files a/QtOpenCVImageTool.zip and b/QtOpenCVImageTool.zip differ
diff --git a/readme.md b/readme.md
index b549775..40d5320 100644
--- a/readme.md
+++ b/readme.md
@@ -234,6 +234,44 @@ C:\Qt\6.6.0\msvc2019_64
 
 通常是 Qt、OpenCV、编译器不匹配。MSVC 工程必须使用 MSVC 版 Qt 和 MSVC 版 OpenCV；MinGW 工程必须使用 MinGW 版 Qt 和 MinGW 版 OpenCV。
 
+## CI 自动构建和发布
+
+仓库提供了 Gitea Actions 工作流：
+
+```text
+.gitea/workflows/build-windows-release.yml
+```
+
+触发方式：
+
+- 推送到 `main` 分支。
+- 推送 `v*` 标签，例如 `v1.0.0`。
+- 在 Gitea 页面手动运行 `workflow_dispatch`。
+
+CI 会在 Fedora 容器中安装 MinGW-w64、Qt6、OpenCV，交叉编译 Windows x64 程序，然后打包：
+
+```text
+QtOpenCVImageTool-windows-x64-<version>.zip
+QtOpenCVImageTool-windows-x64-<version>.zip.sha256
+```
+
+最后通过 Gitea API 上传到仓库 Release。为了允许上传 Release，请在仓库的 Actions Secrets 中配置：
+
+```text
+RELEASE_TOKEN=<具有仓库 release 写权限的 token>
+```
+
+如果 Gitea 已经给 Actions 提供可写的 `GITHUB_TOKEN`，也可以不配置 `RELEASE_TOKEN`。
+
+发布版本建议使用 tag：
+
+```bash
+git tag v1.0.0
+git push origin v1.0.0
+```
+
+这样 Release 名称和包名会使用 `v1.0.0`。如果只是推送到 `main`，CI 会创建预发布版本，名称类似 `build-提交哈希`。
+
 ## WSL 中交叉编译 Windows 程序
 
 WSL 里不能使用 Linux 版 Qt/OpenCV 直接生成 Windows exe，必须准备 Windows 目标库。推荐使用 MinGW-w64 作为交叉编译器，并准备同为 MinGW-w64 目标的 Qt 和 OpenCV。