fix: allow immutable releases

Author: alexeagle

.github/workflows/publish.yaml

@@ -21,7 +21,7 @@ on:
         type: string
 jobs:
   publish:
-    uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@v0.2.3
+    uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@v1.1.0
     with:
       tag_name: ${{ inputs.tag_name }}
       # GitHub repository which is a fork of the upstream where the Pull Request will be opened.

.github/workflows/release.yml

@@ -47,13 +47,14 @@ jobs:
           retention-days: 1
   release:
     needs: build
-    uses: bazel-contrib/.github/.github/workflows/release_ruleset.yaml@v7.2.3
+    uses: bazel-contrib/.github/.github/workflows/release_ruleset.yaml@v7.2.4
     with:
       release_files: |
         go-binaries/*
         bazel-lib-*.tar.gz
       prerelease: false
       tag_name: ${{ inputs.tag_name || github.ref_name }}
+      draft: true
   publish:
     needs: release
     uses: ./.github/workflows/publish.yaml