locking: enforce Bzlmod lockfile consistency

[artemsheinacn]

locking: enforce Bzlmod lockfile consistency

add reusable lockfile check workflow

track MODULE.bazel.lock (remove from .gitignore)

enforce --lockfile_mode=error in CI and scripts

Addresses eclipse-score/score#2628

[github-actions]

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run //:license-check

Status: ⚠️ Needs Review

Click to expand output

[License Check Output]
Starting local Bazel server (8.3.0) and connecting to it...
INFO: Invocation ID: 8e00c675-44f5-432f-9dd6-e0ddd6d43e7d
Computing main repo mapping: 
Computing main repo mapping: 
DEBUG: Rule 'rules_boost+' indicated that a canonical reproducible form can be obtained by modifying arguments integrity = "sha256-LTilyiMMjpYyAi1PW+8RycyAEHy9clo7915R0Bchb2E="
DEBUG: Repository rules_boost+ instantiated at:
  <builtin>: in <toplevel>
Repository rule http_archive defined at:
  /home/runner/.bazel/external/bazel_tools/tools/build_defs/repo/http.bzl:394:31: in <toplevel>
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
WARNING: For repository 'googletest', the root module requires module version googletest@1.17.0, but got googletest@1.17.0.bcr.2 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
Computing main repo mapping: 
Loading: 
Loading: 4 packages loaded
Loading: 4 packages loaded
    currently loading: 
Analyzing: target //:license-check (5 packages loaded, 0 targets configured)
Analyzing: target //:license-check (5 packages loaded, 0 targets configured)

Analyzing: target //:license-check (17 packages loaded, 9 targets configured)

Analyzing: target //:license-check (68 packages loaded, 9 targets configured)

Analyzing: target //:license-check (89 packages loaded, 9 targets configured)

Analyzing: target //:license-check (93 packages loaded, 9 targets configured)

Analyzing: target //:license-check (150 packages loaded, 1149 targets configured)

Analyzing: target //:license-check (150 packages loaded, 1149 targets configured)

Analyzing: target //:license-check (150 packages loaded, 1149 targets configured)

Analyzing: target //:license-check (150 packages loaded, 1149 targets configured)

Analyzing: target //:license-check (161 packages loaded, 2120 targets configured)

Analyzing: target //:license-check (167 packages loaded, 3370 targets configured)

Analyzing: target //:license-check (167 packages loaded, 3370 targets configured)

Analyzing: target //:license-check (167 packages loaded, 3370 targets configured)

Analyzing: target //:license-check (172 packages loaded, 3419 targets configured)

Analyzing: target //:license-check (172 packages loaded, 3419 targets configured)

Analyzing: target //:license-check (172 packages loaded, 3419 targets configured)

Analyzing: target //:license-check (175 packages loaded, 5308 targets configured)

Analyzing: target //:license-check (176 packages loaded, 5432 targets configured)

Analyzing: target //:license-check (201 packages loaded, 5735 targets configured)
[13 / 17] JavaToolchainCompileClasses external/rules_java+/toolchains/platformclasspath_classes; 0s disk-cache, processwrapper-sandbox ... (2 actions running)
INFO: From Generating Dash formatted dependency file ...:
INFO: Successfully converted 244 packages from Cargo.lock to bazel-out/k8-fastbuild/bin/formatted.txt
Analyzing: target //:license-check (204 packages loaded, 5744 targets configured)
[15 / 17] JavaToolchainCompileBootClasspath external/rules_java+/toolchains/platformclasspath.jar; 0s disk-cache, processwrapper-sandbox
Analyzing: target //:license-check (204 packages loaded, 5744 targets configured)
[16 / 17] Building license.check.license_check.jar (); 0s disk-cache, multiplex-worker
Analyzing: target //:license-check (204 packages loaded, 5744 targets configured)
[17 / 17] no actions running
INFO: Analyzed target //:license-check (205 packages loaded, 10078 targets configured).
INFO: Found 1 target...
Target //:license.check.license_check up-to-date:
  bazel-bin/license.check.license_check
  bazel-bin/license.check.license_check.jar
INFO: Elapsed time: 38.500s, Critical Path: 2.72s
INFO: 17 processes: 12 internal, 4 processwrapper-sandbox, 1 worker.
INFO: Build completed successfully, 17 total actions
INFO: Running command line: bazel-bin/license.check.license_check ./formatted.txt <args omitted>
usage: org.eclipse.dash.licenses.cli.Main [-batch <int>] [-cd <url>]
       [-confidence <int>] [-ef <url>] [-excludeSources <sources>] [-help] [-lic
       <url>] [-project <shortname>] [-repo <url>] [-review] [-summary <file>]
       [-timeout <seconds>] [-token <token>]

[github-actions]

The created documentation from the pull request is available at: docu-html