CI: changelog: enforce latest state

This might be necessary to handle non-fast-forward changes, which would be rejected otherwise.

Closes #512 (closed)