Allow releaser target ref and SHA inputs

.github/workflows/releaser.yml

@@ -18,6 +18,14 @@ on:
         required: false
         type: boolean
         default: false
+      ref:
+        required: false
+        type: string
+        default: ${{ github.ref }}
+      sha:
+        required: false
+        type: string
+        default: ${{ github.sha }}
       runner:
         required: false
         type: string
@@ -38,7 +46,10 @@ jobs:
       matrix:
         source: ${{ fromJSON(inputs.sources) }}
     steps:
-      - uses: actions/checkout@v5
+      - id: checkout
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ inputs.sha }}
       - id: version
         name: Determine version
         env:
@@ -116,7 +127,7 @@ jobs:
         if: steps.version.outputs.version != ''
         env:
           BRANCHES: ${{ inputs.branches }}
-          REF: ${{ github.ref }}
+          REF: ${{ inputs.ref }}
         uses: actions/github-script@v8
         with:
           script: |
@@ -135,8 +146,8 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ github.token }}
           REPOSITORY: ${{ github.repository }}
-          REF: ${{ github.ref }}
-          SHA: ${{ github.sha }}
+          REF: ${{ inputs.ref }}
+          SHA: ${{ steps.checkout.outputs.commit }}
         uses: actions/github-script@v8
         with:
           script: |
@@ -187,7 +198,7 @@ jobs:
           draft: ${{ inputs.draft }}
           tag_name: ${{ steps.version.outputs.tag }}
           generate_release_notes: true
-          target_commitish: ${{ github.sha }}
+          target_commitish: ${{ steps.checkout.outputs.commit }}
           make_latest: ${{ steps.version.outputs.prefix == 'v' && steps.version.outputs.suffix == '' && steps.version.outputs.tag == steps.latest.outputs.latest }}
           token: ${{ secrets.UCI_GITHUB_TOKEN || github.token }}
       - name: Create release.json

CHANGELOG.md

@@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Unreleased
 
+## [1.0.45] - 2026-09-16
+### Added
+- allow the `releaser` workflow to release a specific SHA while evaluating release policy against a separate ref
+
 ## [1.0.44] - 2026-09-15
 ### Fixed
 - reject multiline release version values and avoid unsafe prefix matching in release workflows