For the secure supply chain folks, the ability to make a GitHub release and everything associated with it as immutable is in public preview.
https://github.blog/changelog/2025-08-26-releases-now-support-immutability-in-public-preview
I hope every GitHub Action picks this up so we can use version tags safely instead of having to rely on hashes and a comment for what a hash corresponds to to choose the version of the action to use.