Immutable releases support

[scop]

Support for immutable releases would be nice: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/immutable-releases

[gmlewis]

If you can find where immutable releases are supported via the v3 REST API (which I was unable to do), then we should be able to support them. Otherwise, we won't be able to.

[suzuki-shunsuke]

I think GitHub API for Immutable Releases has not been published yet.
https://github.com/orgs/community/discussions/171210#discussioncomment-14237940

[scop]

The release response schemas do have immutable booleans documented, https://docs.github.com/en/rest/releases/releases?apiVersion=2022-11-28. That's the extent the linked PR attempts to support them. The above discussion link appears to discuss immutability from project settings/management point of view, which while surely would be nice to have as well when it becomes available, is not what I'm personally interested in making use of right now.

The PR is untested so far though.

[scop]

Oops, looks like I had forgotten to actually open the PR, had just pushed the branch in my fork. Anyway it's there now, #3725

[scop]

Also FWIW

$ curl -fSsL https://api.github.com/repos/suzuki-shunsuke/tfcmt/releases/tags/v4.14.12 | jq .immutable
true