hermes-agent/.github/workflows
ethernet 758c40135f ci: add blocking uv.lock check
Runs `uv lock --check` on every PR and on push to main that touches
pyproject.toml, uv.lock, or this workflow itself.  Exits non-zero if
the lockfile is out of sync with pyproject.toml, blocking the PR
before it can break the Docker build on main.

Rationale: the new Dockerfile layout uses `uv sync --frozen --extra all`,
which rejects stale lockfiles.  Without this guard, a PR that changes
pyproject.toml dependencies but forgets to regenerate uv.lock would
merge fine and then break docker-publish on main (visible only after
~15 min of build time, producing no image).

On failure, the step adds a GitHub annotation and a workflow summary
block with the exact commands to run locally (`uv lock`,
`git add uv.lock`, `git commit`).

Verified locally that:
- Clean tree: `uv lock --check` succeeds (resolves in ~2ms, no work).
- Stale lockfile (added cowsay to pyproject.toml, not in lock): exits 1
  with message 'The lockfile at `uv.lock` needs to be updated'.
2026-05-08 18:47:07 -04:00
..
contributor-check.yml security: supply chain hardening — CI pinning, dep pinning, and code fixes (#9801) 2026-04-14 14:23:37 -07:00
deploy-site.yml docs: publish llms.txt and llms-full.txt for agent-friendly ingestion (#18276) 2026-04-30 23:17:14 -07:00
docker-publish.yml ci: split docker-publish into per-arch native runners 2026-05-08 18:46:34 -04:00
docs-site-checks.yml docs(website): dedicated page per bundled + optional skill (#14929) 2026-04-23 22:22:11 -07:00
lint.yml ci(lint): add blocking ruff-check + windows-footguns jobs to lint.yml 2026-05-08 14:27:40 -07:00
nix-lockfile-fix.yml change(nix): dedupe nix lockfile checking scripts in ci (#18000) 2026-04-30 22:52:30 +05:30
nix.yml change(nix): dedupe nix lockfile checking scripts in ci (#18000) 2026-04-30 22:52:30 +05:30
osv-scanner.yml chore(security): add OSV-Scanner CI + Dependabot for github-actions only (#20037) 2026-05-04 20:58:21 -07:00
skills-index.yml security: supply chain hardening — CI pinning, dep pinning, and code fixes (#9801) 2026-04-14 14:23:37 -07:00
supply-chain-audit.yml ci(security): narrow supply-chain-audit to high-signal patterns only 2026-04-19 16:25:21 -07:00
tests.yml ci: bump test-job timeout from 10m to 20m (#12718) 2026-04-19 16:28:13 -07:00
uv-lockfile-check.yml ci: add blocking uv.lock check 2026-05-08 18:47:07 -04:00