Merge pull request 'ci: locked dependency installs — stop lane-pin thrash from PyPI drift' (#48) from fix/ci-locked-installs into main

Reviewed-on: #48

.github/workflows/contemplation.yml

@@ -44,7 +44,7 @@ jobs:
           enable-cache: true
 
       - name: install dependencies
-        run: uv pip install -e ".[dev]" pyyaml
+        run: uv sync --locked --extra dev
 
       - name: run contemplation cycle
         id: run

.github/workflows/full-pytest.yml

@@ -53,7 +53,7 @@ jobs:
 
       - name: install dependencies
         run: |
-          uv pip install -e ".[dev]" pyyaml
+          uv sync --locked --extra dev
 
       - name: pytest (parallel, quarantine and slow excluded)
         env:

.github/workflows/lane-shas.yml

@@ -81,7 +81,7 @@ jobs:
       - name: install dependencies
         if: steps.paths.outputs.run == 'true'
         run: |
-          uv pip install -e . pyyaml pytest
+          uv sync --locked
 
       - name: verify lane SHAs
         if: steps.paths.outputs.run == 'true'

.github/workflows/nightly-full-pytest.yml

@@ -50,7 +50,7 @@ jobs:
 
       - name: install dependencies
         run: |
-          uv pip install -e ".[dev]" pyyaml
+          uv sync --locked --extra dev
 
       - name: pytest (parallel, full suite, quarantine excluded)
         env:

.github/workflows/ratify-proposal.yml

@@ -70,7 +70,7 @@ jobs:
           enable-cache: true
 
       - name: install dependencies
-        run: uv pip install -e ".[dev]"
+        run: uv sync --locked --extra dev
 
       - name: resolve review date
         id: date

.github/workflows/smoke.yml

@@ -43,7 +43,7 @@ jobs:
 
       - name: install dependencies
         run: |
-          uv pip install -e ".[dev]" pyyaml
+          uv sync --locked --extra dev
 
       - name: pytest smoke suite
         env: