From fb4263df61207639985d67e9aa35a9088b816d4c Mon Sep 17 00:00:00 2001
From: Jayant Krishnamurthy <541339+jayantk@users.noreply.github.com>
Date: Thu, 20 Aug 2026 18:44:07 +0000
Subject: [PATCH] ci(lazer): pass --locked to cargo in publisher and solana
 workflows

Without --locked, a PR with a stale Cargo.lock silently re-resolves
dependencies at CI time instead of failing, which defeats the point of
committing the lockfile.

cargo build-sbf does not accept --locked as a top-level flag; it only
forwards arguments after `--` to the inner cargo build.
---
 .github/workflows/ci-lazer-publisher.yml | 4 ++--
 .github/workflows/ci-lazer-solana.yml    | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci-lazer-publisher.yml b/.github/workflows/ci-lazer-publisher.yml
index a8635bc2..237e3d8d 100644
--- a/.github/workflows/ci-lazer-publisher.yml
+++ b/.github/workflows/ci-lazer-publisher.yml
@@ -27,6 +27,6 @@ jobs:
       - name: check Rust formatting
         run: cargo +1.81.0 fmt --all
       - name: check Rust clippy
-        run: cargo +1.81.0 clippy --all-targets -- --deny warnings
+        run: cargo +1.81.0 clippy --all-targets --locked -- --deny warnings
       - name: test
-        run: cargo test
+        run: cargo test --locked
diff --git a/.github/workflows/ci-lazer-solana.yml b/.github/workflows/ci-lazer-solana.yml
index 949dd384..195db6bd 100644
--- a/.github/workflows/ci-lazer-solana.yml
+++ b/.github/workflows/ci-lazer-solana.yml
@@ -32,8 +32,8 @@ jobs:
       - name: check Rust formatting
         run: cargo +1.81.0 fmt --all
       - name: check Rust clippy
-        run: cargo +1.81.0 clippy --all-targets -- --deny warnings
+        run: cargo +1.81.0 clippy --all-targets --locked -- --deny warnings
       - name: Build Solana programs
-        run: cargo build-sbf
+        run: cargo build-sbf -- --locked
       - name: test
-        run: cargo test
+        run: cargo test --locked