Enforce the usage and commit lock file to guarantee • Same dependencies • Same versions • Same transitive graph

[balajiyalam2]

This change is to use and commit lock file and make Job fail if lock file change.

This guarantees:
• Same dependencies
• Same versions
• Same transitive graph

[github-actions]

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run //:license-check

Status: ⚠️ Needs Review

Click to expand output

[License Check Output]
2026/05/07 08:25:45 Downloading https://releases.bazel.build/8.4.2/release/bazel-8.4.2-linux-x86_64...
Extracting Bazel installation...
Starting local Bazel server (8.4.2) and connecting to it...
INFO: Invocation ID: f38b2020-c8ea-445a-bace-bd6f42899e39
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Loading: 
Loading: 2 packages loaded
Loading: 2 packages loaded
    currently loading: 
Loading: 2 packages loaded
    currently loading: 
Analyzing: target //:license-check (3 packages loaded, 0 targets configured)
Analyzing: target //:license-check (3 packages loaded, 0 targets configured)

Analyzing: target //:license-check (55 packages loaded, 9 targets configured)

Analyzing: target //:license-check (70 packages loaded, 9 targets configured)

Analyzing: target //:license-check (107 packages loaded, 740 targets configured)

Analyzing: target //:license-check (122 packages loaded, 1792 targets configured)

Analyzing: target //:license-check (126 packages loaded, 2269 targets configured)

Analyzing: target //:license-check (126 packages loaded, 2269 targets configured)

Analyzing: target //:license-check (126 packages loaded, 2269 targets configured)

Analyzing: target //:license-check (132 packages loaded, 4288 targets configured)

Analyzing: target //:license-check (133 packages loaded, 4415 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

Analyzing: target //:license-check (134 packages loaded, 4535 targets configured)

INFO: Analyzed target //:license-check (135 packages loaded, 6039 targets configured).
[9 / 13] JavaToolchainCompileClasses external/rules_java+/toolchains/platformclasspath_classes; 0s disk-cache
[11 / 13] JavaToolchainCompileBootClasspath external/rules_java+/toolchains/platformclasspath.jar; 0s disk-cache, processwrapper-sandbox
INFO: Found 1 target...
Target //:license.check.license_check up-to-date:
  bazel-bin/license.check.license_check
  bazel-bin/license.check.license_check.jar
INFO: Elapsed time: 124.509s, Critical Path: 2.71s
INFO: 13 processes: 9 internal, 3 processwrapper-sandbox, 1 worker.
INFO: Build completed successfully, 13 total actions
INFO: Running command line: bazel-bin/license.check.license_check ./formatted.txt <args omitted>
usage: org.eclipse.dash.licenses.cli.Main [-batch <int>] [-cd <url>]
       [-confidence <int>] [-ef <url>] [-excludeSources <sources>] [-help] [-lic
       <url>] [-project <shortname>] [-repo <url>] [-review] [-summary <file>]
       [-timeout <seconds>] [-token <token>]

[jannowotsch]

What is the reason for this change? It would be good to add a description to your PR that describes why something is changed.

[balajiyalam2]

This change is to use and commit lock file and make Job fail if lock file change.

This guarantees:
• Same dependencies
• Same versions
• Same transitive graph

[jannowotsch]

This change is to use and commit lock file and make Job fail if lock file change.

This guarantees: • Same dependencies • Same versions • Same transitive graph

Put this into the description please, this is where it belongs :-)
I would do it myself but apparently I don't permissions to edit the description.

[balajiyalam2]

Description Updated