enforce lock file sync

.github/workflows/build_linux.yml

@@ -35,4 +35,4 @@ jobs:
           cache-save: ${{ github.event_name == 'push' }}
       - name: Bazel Build
         run: |
-          bazel build --config time-x86_64-linux -- //score/... //examples/...
+          bazel build --lockfile_mode=error --config time-x86_64-linux -- //score/... //examples/...

.github/workflows/build_qnx8.yml

@@ -30,7 +30,7 @@ jobs:
       matrix:
         config: ['time-x86_64-qnx', 'time-arm64-qnx']
     with:
-      bazel-target: '//score/... //examples/...'
+      bazel-target: '--lockfile_mode=error //score/... //examples/...'
       bazel-config: ${{ matrix.config }}
       credential-helper: 'tools/qnx_credential_helper.py'
       environment-name: 'workflow-approval'

.github/workflows/code_coverage.yml

@@ -26,7 +26,7 @@ jobs:
   code-coverage:
     uses: eclipse-score/cicd-workflows/.github/workflows/cpp-coverage.yml@main
     with:
-      bazel-target: "//score/..."
+      bazel-target: "--lockfile_mode=error //score/..."
       bazel-config: "time-x86_64-linux"
       extra-bazel-flags: "--test_output=errors --nocache_test_results"
       artifact-name-suffix: "_cpp"

.github/workflows/comp_tests.yml

@@ -37,6 +37,6 @@ jobs:
       contents: read
       pull-requests: read
     with:
-      bazel-target: 'test --config=time-x86_64-linux //score/...'
+      bazel-target: 'test --lockfile_mode=error --config=time-x86_64-linux //score/...'
       upload-name: 'bazel-testlogs'
       packages: 'fakechroot'

.github/workflows/docs.yml

@@ -35,7 +35,7 @@ jobs:
       pull-requests: write
       contents: read
     with:
-      bazel-docs-verify-target: "//:docs_check"
+      bazel-docs-verify-target: "--lockfile_mode=error //:docs_check"
 
   docs-build:
     needs: docs-verify
@@ -47,5 +47,5 @@ jobs:
       id-token: write
     with:
       # the bazel-target depends on your repo specific docs_targets configuration (e.g. "suffix")
-      bazel-target: "//:docs -- --github_user=${{ github.repository_owner }} --github_repo=${{ github.event.repository.name }}"
+      bazel-target: "--lockfile_mode=error //:docs -- --github_user=${{ github.repository_owner }} --github_repo=${{ github.event.repository.name }}"
       retention-days: 3

.gitignore

@@ -34,7 +34,7 @@
 
 # Bazel
 bazel-*
-MODULE.bazel.lock
+#MODULE.bazel.lock
 user.bazelrc
 
 # Ruff