Enable release immutability for this action's releases

[VeyronSakai]

Summary

Could you please enable release immutability for this repository?

GitHub's immutable releases became generally available on 2025-10-28. When enabled, the Git tag associated with a published release is locked to a specific commit and can no longer be moved, modified, or deleted while the release exists. It also protects against repository resurrection attacks (reusing tags after deleting/recreating a repo).

Why it helps

Many workflows pin this action by tag (e.g. EndBug/add-and-commit@v10). With release immutability enabled, those tag-based references gain a strong integrity guarantee — the tag can no longer be repointed to different code — which strengthens supply-chain security for everyone consuming the action.

How to enable

Repository Settings → General → Releases → Enable release immutability. Note that it only applies to releases published after it is turned on.

See also: https://docs.github.com/en/actions/how-tos/create-and-publish-actions/using-immutable-releases-and-tags-to-manage-your-actions-releases

Thanks for maintaining this action! 🙏

[EndBug]

Hi @VeyronSakai ✌🏻
I do get the advantage of immutable release tags, but I keep the major version tags updated on purpose. If a user chooses to use, for example v10, they'll automatically get any non-breaking update I'm going to release to the action.
So if for example tomorrow I release v10.0.1 the v10 tag will be updated to point to the new release.

This is intentional, and enabling release immutability would not allow for this to happen.
If users want to pin a specific version, the most reliable way to do that is to pin a specific commit.

So thank you for the suggestion, but I won't enable this as of now ;)