use --locked flag for uv sync everywhere in CI

Author: emilykl

.github/workflows/build-package.yml

@@ -30,7 +30,7 @@ jobs:
         run: |
           uv venv
           source .venv/bin/activate
-          uv sync --extra dev_optional
+          uv sync --locked --extra dev_optional
       - name: Update plotly.js to dev
         run: |
           source .venv/bin/activate
@@ -42,7 +42,7 @@ jobs:
       - name: Build source distribution packages
         run: |
           source .venv/bin/activate
-          uv sync --extra dev_build
+          uv sync --locked --extra dev_build
           python -m build --sdist --wheel -o dist
       - name: Upload dist artifacts
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
@@ -70,7 +70,7 @@ jobs:
         run: |
           uv venv
           source .venv/bin/activate
-          uv sync --extra dev_build
+          uv sync --locked --extra dev_build
           cd js
           npm ci
           npm run build

.github/workflows/check-codegen.yml

@@ -29,7 +29,7 @@ jobs:
         uv venv
         source .venv/bin/activate
         uv lock --check
-        uv sync --extra dev_codegen
+        uv sync --locked --extra dev_codegen
     - name: Run codegen
       run: |
         source .venv/bin/activate

.github/workflows/check-formatting.yml

@@ -26,7 +26,7 @@ jobs:
         run: |
           uv venv
           source .venv/bin/activate
-          uv sync --extra dev_core
+          uv sync --locked --extra dev_core
       - name: Check handwritten code with ruff
         run: |
           source .venv/bin/activate

.github/workflows/check-js-build.yml

@@ -54,7 +54,7 @@ jobs:
         source .venv/bin/activate
         # Technically, we only need the `jupyter-builder` package, but using the dev_build extra
         # keeps build behavior consistent across all CI jobs
-        uv sync --extra dev_build
+        uv sync --locked --extra dev_build
         cd js
         npm ci
         npm run build

.github/workflows/run-percy.yml

@@ -39,7 +39,7 @@ jobs:
         run: |
           uv venv
           source .venv/bin/activate
-          uv sync --extra dev_optional
+          uv sync --locked --extra dev_optional
       - name: Build HTML figures (Pandas 2)
         run: |
           source .venv/bin/activate

.github/workflows/run-pytest.yml

@@ -31,7 +31,7 @@ jobs:
           uv venv
           source .venv/bin/activate
           uv lock --check
-          uv sync --extra dev_core
+          uv sync --locked --extra dev_core
           python --version
       - name: Test core
         run: |
@@ -59,7 +59,7 @@ jobs:
         run: |
           uv venv
           source .venv/bin/activate
-          uv sync --extra dev_optional --extra dev_pandas3
+          uv sync --locked --extra dev_optional --extra dev_pandas3
           python --version
       - name: Test core
         run: |
@@ -111,7 +111,7 @@ jobs:
         run: |
           uv venv
           source .venv/bin/activate
-          uv sync --extra dev_optional --extra dev_pandas${{ matrix.pandas-version }}
+          uv sync --locked --extra dev_optional --extra dev_pandas${{ matrix.pandas-version }}
       - name: Test core
         run: |
           source .venv/bin/activate
@@ -156,7 +156,7 @@ jobs:
         run: |
           uv venv
           source .venv/bin/activate
-          uv sync --extra dev_optional
+          uv sync --locked --extra dev_optional
           uv pip uninstall kaleido
           uv pip install kaleido==0.2.1
           python --version