https://astral.sh/blog/open-source-security-at-astral talks about immutable releases, which seems useful. It looks like our release workflow already supports this, because we don't actually include any assets on the release. So basically, we just need to enable that!
(ideally the release workflow could make the release for us, but I'm not too hopeful about that because we include a changelog...)
https://astral.sh/blog/open-source-security-at-astral talks about immutable releases, which seems useful. It looks like our release workflow already supports this, because we don't actually include any assets on the release. So basically, we just need to enable that!
(ideally the release workflow could make the release for us, but I'm not too hopeful about that because we include a changelog...)