diff --git a/.github/workflows/build-native.yml b/.github/workflows/build-native.yml
index 3fb4e9412..e526fa218 100644
--- a/.github/workflows/build-native.yml
+++ b/.github/workflows/build-native.yml
@@ -173,11 +173,11 @@ jobs:
         run: npm run build
 
       - name: Verify dist exists
-        run: test -f dist/loader.js || { echo "::error::dist/loader.js missing after build"; exit 1; }
+        run: test -s dist/loader.js || { echo "::error::dist/loader.js missing or empty after build"; exit 1; }
 
       - name: Verify tarball contents
         run: |
-          npm pack --dry-run 2>&1 | tee /tmp/pack-output.txt
+          npm pack --dry-run --ignore-scripts 2>&1 | tee /tmp/pack-output.txt
           grep -q "dist/loader.js" /tmp/pack-output.txt || {
             echo "::error::dist/loader.js not in tarball"
             exit 1
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d9108d648..a8cfd5899 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,11 @@ Format based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [2.10.8] - 2026-03-14
+
+### Fixed
+- Publish verification checks `dist/loader.js` is non-empty (`-s`) and uses `--ignore-scripts` on `npm pack --dry-run` to match actual publish behaviour (#298)
+
 ## [2.10.7] - 2026-03-14
 
 ### Added
@@ -453,7 +458,8 @@ Format based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 ### Changed
 - License updated to MIT
 
-[Unreleased]: https://github.com/gsd-build/gsd-2/compare/v2.10.7...HEAD
+[Unreleased]: https://github.com/gsd-build/gsd-2/compare/v2.10.8...HEAD
+[2.10.8]: https://github.com/gsd-build/gsd-2/compare/v2.10.7...v2.10.8
 [2.10.7]: https://github.com/gsd-build/gsd-2/compare/v2.10.6...v2.10.7
 [2.10.6]: https://github.com/gsd-build/gsd-2/compare/v2.10.5...v2.10.6
 [2.10.5]: https://github.com/gsd-build/gsd-2/compare/v2.10.4...v2.10.5
diff --git a/package-lock.json b/package-lock.json
index 62e7d93c1..03b444326 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "gsd-pi",
-  "version": "2.10.7",
+  "version": "2.10.8",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "gsd-pi",
-      "version": "2.10.7",
+      "version": "2.10.8",
       "bundleDependencies": [
         "@gsd/native",
         "@gsd/pi-agent-core",
diff --git a/package.json b/package.json
index a79cf20f9..fbad59586 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "gsd-pi",
-  "version": "2.10.7",
+  "version": "2.10.8",
   "description": "GSD — Get Shit Done coding agent",
   "license": "MIT",
   "repository": {