jcoffey-dev
4b85113262
The publish workflow only built a tag whose commit is on main. That keeps every image tied to reviewed code, but it means production can only get a fix together with everything that has landed on main since its release. A tag on a release/* branch is now accepted too. A hotfix branch starts at an earlier release tag, takes fixes through pull requests into it (so the code is still reviewed and CI-tested before it is tagged), bumps brand_version! and is tagged there. The tag must still equal v<brand_version!>, and the step prints which branch it was found on. A tag runs the workflow file from its own commit, so a hotfix branch that starts before this change needs this commit cherry-picked onto it before its tag is pushed.