Release process automation and maturity

[andreahlert]

Context

The 0.42.0 release process (#678) exposed several manual steps and gaps in our release tooling. While the current scripts/apache_release.py handles the basics (build, sign, SVN upload, vote template), there is no automation for RC promotion, release branches, backports, reproducible builds, or release notes.

Looking at how other Apache projects (especially Airflow) handle releases, there are clear improvements we can adopt to make the process more reliable and less error-prone.

Current state

• scripts/apache_release.py handles build, GPG signing, SHA-512 checksums, and SVN upload
• scripts/verify_apache_artifacts.py handles voter verification
• Vote email template is generated but sent manually
• RC promotion from dist/dev to dist/release is fully manual
• No release branches, no backport automation, no reproducible builds

Goals

1. Make cutting an RC a single-command operation
2. Make promoting a passed RC to final release a single-command operation
3. Introduce release branches for safe cherry-picking during vote periods
4. Automate release notes generation
5. Ensure builds are reproducible (bit-for-bit identical from same source)

Sub-issues

• ci: reproducible builds with SOURCE_DATE_EPOCH #716 Reproducible builds with SOURCE_DATE_EPOCH
• ci: add RC promotion script (dev -> release) #717 RC promotion script (SVN dev -> release)
• ci: introduce release branch model #718 Release branch model (vX.Y-test + vX.Y-stable)
• ci: auto-backport workflow for release branches #721 Auto-backport workflow for release branches
• ci: automate release notes generation #723 Release notes automation
• ci: improve voter verification script #720 Voter verification improvements
• ci: vote and announcement email tooling #719 Vote and announcement email tooling
• ci: milestone management workflow #722 Milestone management workflow

[github-actions]

@andreahlert, this issue has been inactive for 15 days.
Are you still working on it? Drop a comment to let us know.

If there is no update within 7 days, the assignment will be removed
so someone else can pick it up
(per the assignment policy).