ci: Ensure Cargo.lock dependencies are correct

.github/workflows/lint.yml

@@ -26,3 +26,28 @@ jobs:
       - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
       - run: |
           cargo clippy -- -Dwarnings
+  lock_machete:
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - run: |
+          rustup toolchain install
+      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+      - run: |
+          cargo install cargo-machete
+      - run: |
+          cargo machete
+      - name: Ensure Cargo.lock is current
+        run: |
+          cargo check
+          if ! git diff --quiet -- Cargo.lock; then
+            echo "Cargo.lock is out of date"
+            {
+              echo "## Cargo.lock is out of date"
+              echo 'Run `cargo check` locally and commit the updated `Cargo.lock`.'
+            } >> "$GITHUB_STEP_SUMMARY"
+            echo "::group::Cargo.lock diff"
+            git diff -- Cargo.lock
+            echo "::endgroup::"
+            exit 1
+          fi

v-api/Cargo.toml

@@ -16,7 +16,6 @@ base64 = { workspace = true }
 chrono = { workspace = true, features = ["serde"] }
 cookie = { workspace = true }
 crc32c = { workspace = true }
-diesel = { workspace = true }
 dropshot = { workspace = true }
 dropshot-authorization-header = { path = "../dropshot-authorization-header" }
 futures = { workspace = true }
@@ -32,7 +31,6 @@ newtype-uuid = { workspace = true }
 partial-struct = { workspace = true }
 percent-encoding = { workspace = true }
 rand = { workspace = true, features = ["std"] }
-rand_core = { workspace = true }
 reqwest = { workspace = true }
 rsa = { workspace = true, features = ["sha2"] }
 schemars = { workspace = true, features = ["chrono"] }
@@ -46,7 +44,6 @@ steno = { workspace = true, optional = true }
 tap = { workspace = true }
 thiserror = { workspace = true }
 tokio = { workspace = true, features = ["rt-multi-thread", "macros"] }
-toml = { workspace = true }
 tracing = { workspace = true }
 url = { workspace = true }
 uuid = { workspace = true, features = ["v4", "serde"]  }

xtask/Cargo.toml

@@ -8,4 +8,3 @@ publish.workspace = true
 clap = { workspace = true }
 regex = { workspace = true }
 semver = { workspace = true }
-serde = { workspace = true }