From 1884882af2d8bb7cd13b6a624146f9d3230b2fec Mon Sep 17 00:00:00 2001 From: Derek Cormier Date: Tue, 31 Mar 2026 11:09:57 -0700 Subject: [PATCH] chore: enable immutable releases --- .github/workflows/publish.yaml | 2 +- .github/workflows/release.yaml | 7 +++++++ 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index d395670..75b3ce3 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -21,7 +21,7 @@ on: type: string jobs: publish: - uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@v1.1.0 + uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@v1.2.0 with: tag_name: ${{ inputs.tag_name }} # GitHub repository which is a fork of the upstream where the Pull Request will be opened. diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index de0b719..6d23b95 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -24,6 +24,8 @@ jobs: with: release_files: diff.bzl-*.tar.gz prerelease: false + draft: true + attest: true tag_name: ${{ inputs.tag_name || github.ref_name }} publish: needs: release @@ -32,3 +34,8 @@ jobs: tag_name: ${{ inputs.tag_name || github.ref_name }} secrets: publish_token: ${{ secrets.publish_token || secrets.BCR_PUBLISH_TOKEN }} + finalize: + # Publish the draft release + uses: softprops/action-gh-release@v2 + with: + tag_name: ${{ inputs.tag_name || github.ref_name }}