enforce lock file sync

.github/workflows/build-cli.yml

@@ -33,7 +33,7 @@ jobs:
           repository-cache: true
 
       - name: Run Gazelle
-        run: bazel run //:gazelle
+        run: bazel run --lockfile_mode=error //:gazelle
 
       - name: Set version
         id: version

.github/workflows/build.yml

@@ -24,7 +24,7 @@ jobs:
       contents: read
       pull-requests: read
     with:
-      bazel-target: "//src:scrample"
+      bazel-target: "--lockfile_mode=error //src:scrample"
       bazel-config: "x86_64-qnx"
       credential-helper: ".github/tools/qnx_credential_helper.py"
       environment-name: "workflow-approval"

.github/workflows/docs.yml

@@ -39,5 +39,5 @@ jobs:
 
     with:
       # the bazel-target depends on your repo specific docs_targets configuration (e.g. "suffix")
-      bazel-target: "//:docs -- --github_user=${{ github.repository_owner }} --github_repo=${{ github.event.repository.name }}"
+      bazel-target: "--lockfile_mode=error //:docs -- --github_user=${{ github.repository_owner }} --github_repo=${{ github.event.repository.name }}"
       retention-days: 3

.github/workflows/format.yml

@@ -23,4 +23,4 @@ jobs:
   formatting-check:
     uses: eclipse-score/cicd-workflows/.github/workflows/format.yml@c1c90b1a82a1fab0fc202979dde6686b2162d5a8 # v0.0.0
     with:
-      bazel-target: "test //:format.check" # optional, this is the default
+      bazel-target: "test --lockfile_mode=error //:format.check" # optional, this is the default

.github/workflows/release.yml

@@ -34,7 +34,7 @@ jobs:
           repository-cache: true
 
       - name: Run Gazelle
-        run: bazel run //:gazelle
+        run: bazel run --lockfile_mode=error //:gazelle
 
       - name: Get version from tag
         id: version

.github/workflows/release_verification.yml

@@ -40,7 +40,7 @@ jobs:
           SCORE_QNX_USER: ${{ secrets.SCORE_QNX_USER }}
           SCORE_QNX_PASSWORD: ${{ secrets.SCORE_QNX_PASSWORD }}
         run: |
-          bazel build --config x86_64-qnx --credential_helper=*.qnx.com=${{ github.workspace }}/.github/tools/qnx_credential_helper.py -- \
+          bazel build --lockfile_mode=error --config x86_64-qnx --credential_helper=*.qnx.com=${{ github.workspace }}/.github/tools/qnx_credential_helper.py -- \
           //src:scrample
       - name: Cleanup QNX License
         if: always()

.gitignore

@@ -36,7 +36,6 @@
 
 # Bazel
 bazel-*
-MODULE.bazel.lock
 user.bazelrc
 external