The v0.5.4 release step failed (open node-lookup-linux-amd64: no such
file or directory) and the releases page carried no binaries: the build
loop's unescaped shell vars were blanked by Woodpecker at parse time so
no cross-compiled binaries were produced, and the same blanking left the
release --note empty (git log "..v0.5.4").
- Replace the describe HEAD^ changelog anchor with a previous-tag scan
that skips tags on the current commit and picks the newest semver
ancestor tag, so duplicate-commit tags (v0.5.3/v0.5.4) no longer jump
the range back to v0.5.1 or produce an empty note.
- Attach the packaged RPM (from dist/) and a generated sha256sums.txt
alongside the 12 cross-compiled binaries.
- Build the asset list once and checksum exactly what is uploaded.
Ben Vincent