From a0ced1ae98f535838d5969751026d00bf4116736 Mon Sep 17 00:00:00 2001
From: Arjo Bruijnes <arjo.bruijnes@mendix.com>
Date: Thu, 6 Aug 2026 16:35:48 +0200
Subject: [PATCH 1/2] Determine release tag based on current latest

---
 .github/workflows/PublishNpm.yml | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/PublishNpm.yml b/.github/workflows/PublishNpm.yml
index 19029f88..44f868a4 100644
--- a/.github/workflows/PublishNpm.yml
+++ b/.github/workflows/PublishNpm.yml
@@ -73,6 +73,21 @@ jobs:
         with:
           node-version: '24' # Includes a version of npm higher than 11.5.1, which is needed for OIDC
 
+      - name: Release Tag
+        id: tag
+        run: |
+          release="${{ matrix.release.version }}"
+          latest="$(npm view @mendix/${{ matrix.release.package }} dist-tags.latest)"
+          older="$(npx semver@7.8.5 "$latest" "$release" 2>/dev/null | head -n 1)"
+          tag="latest"
+          if [[ "$latest" != "$older" ]]; then
+            tag="$(echo "$release" | sed -E 's/^([0-9]+\.[0-9]+).[0-9]+$/\1-latest/')"
+          fi
+          printf 'RELEASE_TAG=%s' "$tag" >> "$GITHUB_OUTPUT"
+
+
       - name: Publish package
         working-directory: ./packages/${{ matrix.release.package }}
-        run: npm publish mendix-${{ matrix.release.package }}-${{matrix.release.version }}.tgz
+        run: npm publish --tag ${{ vars.tag }} mendix-${{ matrix.release.package }}-${{matrix.release.version }}.tgz
+        variables:
+          tag: ${{ steps.tag.outputs.RELEASE_TAG }}

From bcfc256a65b1781bef48fb7311f90e999f0eecf7 Mon Sep 17 00:00:00 2001
From: Arjo Bruijnes <arjo.bruijnes@mendix.com>
Date: Thu, 6 Aug 2026 16:48:04 +0200
Subject: [PATCH 2/2] Trigger common checks for version branches too

---
 .github/workflows/ShaCheck.yml        | 8 ++++++--
 .github/workflows/TestAndBuild.yml    | 8 ++++++--
 .github/workflows/TestPWTCommands.yml | 2 ++
 3 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ShaCheck.yml b/.github/workflows/ShaCheck.yml
index b3446feb..d3364e09 100644
--- a/.github/workflows/ShaCheck.yml
+++ b/.github/workflows/ShaCheck.yml
@@ -2,9 +2,13 @@ name: Ensure SHA pinned actions
 
 on:
   push:
-    branches: [master]
+    branches:
+      - master
+      - version/*
   pull_request:
-    branches: [master]
+    branches:
+      - master
+      - version/*
 
 jobs:
   harden_security:
diff --git a/.github/workflows/TestAndBuild.yml b/.github/workflows/TestAndBuild.yml
index a90d8fe7..31355d70 100644
--- a/.github/workflows/TestAndBuild.yml
+++ b/.github/workflows/TestAndBuild.yml
@@ -2,13 +2,17 @@ name: Test & Build
 
 on:
   push:
-    branches: [master]
+    branches:
+      - master
+      - version/*
     paths:
       - 'pnpm-lock.yaml'
       - 'packages/**'
       - '.github/workflows/TestAndBuild.yml'
   pull_request:
-    branches: [master]
+    branches:
+      - master
+      - version/*
     paths:
       - 'pnpm-lock.yaml'
       - 'packages/**'
diff --git a/.github/workflows/TestPWTCommands.yml b/.github/workflows/TestPWTCommands.yml
index 6090d0c7..e8057227 100644
--- a/.github/workflows/TestPWTCommands.yml
+++ b/.github/workflows/TestPWTCommands.yml
@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - master
+      - version/*
     paths:
       - 'pnpm-lock.yaml'
       - 'packages/generator-widget/**'
@@ -12,6 +13,7 @@ on:
   pull_request:
     branches:
       - master
+      - version/*
     paths:
       - 'pnpm-lock.yaml'
       - 'packages/generator-widget/**'