I'll add a note about this in the docs, but releaser PSA: as long as you have your copy of master @ the changelog / VERSION bump sha, it's ok if more changes have landed, the release script still works just fine and tags the correct, now-stale, local tip of master and not the new commits after it.