From 3e8d831baaebfef8f4dd0181990d88f0d0a5e9f6 Mon Sep 17 00:00:00 2001
From: PPawlowski <piotr@devopswizards.com>
Date: Thu, 10 Sep 2026 17:37:24 +0200
Subject: [PATCH 1/2] Check if published package is available in remote
 registry

---
 .github/workflows/publish_node_package.yml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/.github/workflows/publish_node_package.yml b/.github/workflows/publish_node_package.yml
index ad244a2..ddf1798 100644
--- a/.github/workflows/publish_node_package.yml
+++ b/.github/workflows/publish_node_package.yml
@@ -103,6 +103,7 @@ jobs:
         working-directory: ${{ inputs.working_directory }}
         run: |
           npm version prerelease --preid `git rev-parse --short HEAD`-`date +%Y%m%d%H%M` --no-git-tag-version
+          echo "package_version=$(npm pkg get version | tr -d '\"')" >> $GITHUB_ENV
 
       - name: Configure node
         if: |
@@ -171,3 +172,22 @@ jobs:
           npm publish ${{ env.NPM_PUBLISH_PARAMETERS }} --tag ${{ env.release_name }}
         env:
           NODE_AUTH_TOKEN: ${{ secrets.npm_registry_token }}
+
+      - name: Verify published package is available
+        if: ${{ inputs.publish_package }}
+        working-directory: ${{ inputs.working_directory }}
+        run: |
+          attempt=0
+          while true; do
+            attempt=$((attempt + 1))
+            published_version=$(npm view "${{ inputs.package_name }}@${{ env.package_version }}" version --prefer-online 2>/dev/null || true)
+            tagged_version=$(npm view "${{ inputs.package_name }}" "dist-tags.${{ env.release_name }}" --prefer-online 2>/dev/null || true)
+            if [ "$published_version" = "${{ env.package_version }}" ] && [ "$tagged_version" = "${{ env.package_version }}" ]; then
+              echo "### :white_check_mark: ${{ inputs.package_name }}@${{ env.package_version }} available, tag \`${{ env.release_name }}\` resolves to it" >> $GITHUB_STEP_SUMMARY
+              exit 0
+            fi
+            echo "Attempt $attempt: version=${published_version:-missing} tag=${tagged_version:-missing} expected=${{ env.package_version }}; retrying in 30s"
+            sleep 30
+          done
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.npm_registry_token }}

From b0a2e4b34f96acaae7466c46461cad078f5472e4 Mon Sep 17 00:00:00 2001
From: PPawlowski <piotr@devopswizards.com>
Date: Thu, 10 Sep 2026 17:37:58 +0200
Subject: [PATCH 2/2] Remove deprecated `always-auth`

---
 .github/workflows/publish_node_package.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/publish_node_package.yml b/.github/workflows/publish_node_package.yml
index ddf1798..ab63456 100644
--- a/.github/workflows/publish_node_package.yml
+++ b/.github/workflows/publish_node_package.yml
@@ -114,7 +114,6 @@ jobs:
           node-version: ${{ inputs.node_version }}
           registry-url: '${{ inputs.npm_registry_url }}'
           scope: '@flowfuse'
-          always-auth: true
 
       - name: Set dependecies versions
         if: ${{ inputs.package_dependencies != '' }}