the other bit that is implicit now, is that you need to be on exactly the sha you want to release