diff --git a/changelog/unreleased/pull-4100 b/changelog/unreleased/pull-4100
new file mode 100644
index 000000000..33582d72d
--- /dev/null
+++ b/changelog/unreleased/pull-4100
@@ -0,0 +1,9 @@
+Bugfix: Restore self-update to disabled-by-default
+
+Due to a typo, the `self-update` feature was always compiled, even if the
+`selfupdate` tag was not explicitly enabled.
+
+As intended, it is now disabled by default.
+Official builds using `build.go` continue to explicitly enable it.
+
+https://github.com/restic/restic/pull/4100
diff --git a/cmd/restic/cmd_self_update.go b/cmd/restic/cmd_self_update.go
index 23345a97c..4b86c416f 100644
--- a/cmd/restic/cmd_self_update.go
+++ b/cmd/restic/cmd_self_update.go
@@ -1,4 +1,4 @@
-// xbuild selfupdate
+//go:build selfupdate
 
 package main