Merge pull request #3259 from locustio/check-uv.lock-during-build

GH Actions: update uv version, ensure uv.lock doesn't contain anything not in pyproject.toml

Author: cyberw

.github/workflows/tests.yml

@@ -44,12 +44,17 @@ jobs:
 
       - uses: astral-sh/setup-uv@v5
         with:
-          version: "0.7.2"
+          version: "0.9.7"
           enable-cache: true
-          cache-dependency-glob: "uv.lock"
+          cache-dependency-glob: |
+            "pyproject.toml"
+            "uv.lock"
 
       - run: uv venv
 
+      # ensure uv.lock doesnt contain anything not in pyproject.toml
+      - run: uv lock --check
+
       - name: Install the project
         run: uv sync
 
@@ -161,9 +166,11 @@ jobs:
 
       - uses: astral-sh/setup-uv@v5
         with:
-          version: "0.7.2"
+          version: "0.9.7"
           enable-cache: true
-          cache-dependency-glob: "uv.lock"
+          cache-dependency-glob: |
+            "pyproject.toml"
+            "uv.lock"
 
       - run: uv venv --python ${{ matrix.python }}