raulcd opened a new issue, #48000: URL: https://github.com/apache/arrow/issues/48000
### Describe the enhancement requested GitHub published the option of setting up immutable releases in order to improve protection against supply chain attacks, the announcement can be read here: https://github.blog/changelog/2025-10-28-immutable-releases-are-now-generally-available/ Once the release is published we can't add new assets to it but if the release is in draft mode you can, we could use draft releases for RCs while we build the binaries, so we can add new assets. Adding the flag `--draft` to `gh release create` should work. More info here: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/immutable-releases We can test the workflow and if we are happy with it we could ask infra to enable immutable releases. ### Component(s) Release -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
