b33e9dc592
b7197e8moved the digest-compare into the re-tag step with 'set -euo pipefail' but no 'shell: bash'; Gitea's default sh (dash) aborts on -o pipefail, leaving base-latest un-promoted on the v1.2.4 release (run 418). Same footgun ased49b8d. Consumer tags unaffected (they FROM base-<hash>, not base-latest).