Workflow gathering approvals on release branch

.github/workflows/check_release_approvals.yml

@@ -0,0 +1,49 @@
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
+name: Check Release Branch Approvals
+on:
+  pull_request_review:
+    types: [submitted, edited, dismissed]
+jobs:
+  check-approvals:
+    name: Verify Required Approvals
+    if: startsWith(github.event.pull_request.base.ref, 'release/')
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - name: Setup Bazel
+        uses: bazel-contrib/setup-bazel@0.18.0
+        with:
+          bazelisk-cache: true
+          disk-cache: ${{ github.workflow }}
+          repository-cache: true
+          cache-save: ${{ github.event_name == 'push' }}
+      - name: Check Release Approvals
+        id: check-approvals
+        env:
+          REPO_OWNER: ${{ github.repository_owner }}
+          REPO_NAME: ${{ github.event.repository.name }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+          BASE_BRANCH: ${{ github.base_ref }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          bazel run //scripts/tooling -- release check_approvals
+      - name: Success
+        if: steps.check-approvals.outputs.all-approved == 'true'
+        run: |
+          echo "✅ All modules have required approvals"
+          echo "Approved modules: ${{ steps.check-approvals.outputs.approved-modules }}"

scripts/tooling/cli/main.py

@@ -20,8 +20,10 @@ def main() -> None:
     subparsers.required = True
 
     from scripts.tooling.cli.misc import register as _register_misc
+    from scripts.tooling.cli.release import register as _register_release
 
     _register_misc(subparsers)
+    _register_release(subparsers)
 
     args = parser.parse_args()
     sys.exit(args.func(args))

scripts/tooling/cli/release/__init__.py

@@ -0,0 +1,25 @@
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
+import argparse
+
+
+def register(subparsers: argparse._SubParsersAction) -> None:
+    release_parser = subparsers.add_parser("release", help="Release utilities")
+    release_sub = release_parser.add_subparsers(dest="command", metavar="COMMAND")
+    release_sub.required = True
+
+    from scripts.tooling.cli.release.check_approvals import (
+        register as _register_release_approvals,
+    )
+
+    _register_release_approvals(release_sub)