Enables lockfile workflow with sbt-dependency-lock

.github/.scala-steward.conf

@@ -68,10 +68,10 @@ updates.ignore = [ { groupId = "org.scala-lang", artifactId = "scala-library" }
 
 # If set, Scala Steward will use this message template for the commit messages and PR titles.
 # Supported variables: ${artifactName}, ${currentVersion}, ${nextVersion} and ${default}
-# Default: "${default}" which is equivalent to "Update ${artifactName} to ${nextVersion}" 
+# Default: "${default}" which is equivalent to "Update ${artifactName} to ${nextVersion}"
 commits.message = "Update ${artifactName} from ${currentVersion} to ${nextVersion}"
 
-# If true and when upgrading version in .scalafmt.conf, Scala Steward will perform scalafmt 
+# If true and when upgrading version in .scalafmt.conf, Scala Steward will perform scalafmt
 # and add a separate commit when format changed. So you don't need reformat manually and can merge PR.
 # If false, Scala Steward will not perform scalafmt, so your CI may abort when reformat needed.
 # Default: true
@@ -90,9 +90,13 @@ scalafmt.runAfterUpgrading = false
 #   groupId = "com.github.sbt",
 #   artifactId = "sbt-protobuf"
 # }]
+postUpdateHooks = [{
+  command = ["sbt", "dependencyLockWrite"],
+  commitMessage = "Regenerated sbt lock file"
+}]
 
 # You can override some config options for dependencies that matches the given pattern.
-# Currently, "pullRequests" can be overridden.  
+# Currently, "pullRequests" can be overridden.
 # Each pattern must have `groupId`, and may have `artifactId` and `version`.
 # First-matched entry is used.
 # More-specific entry should be placed before less-specific entry.

.github/workflows/ci.yaml

@@ -22,8 +22,16 @@ jobs:
           extraKey: ${{ runner.os }}
       - uses: coursier/setup-action@v1
         with:
+          path: |
+            ~/.sbt
+            ~/.ivy2/cache
+            ~/.coursier/cache/v1
+            ~/.cache/coursier/v1
+            ~/AppData/Local/Coursier/Cache/v1
+            ~/Library/Caches/Coursier/v1
+          key: ${{ runner.os }}-sbt-cache-v2-${{ hashFiles('**/*.sbt') }}-${{ hashFiles('project/build.properties') }}
           jvm: adopt:1.8
       - name: Build, test, and package project on Spark 3.5
-        run: bin/sbt clean compile test package makePom -DsparkVersion=3.5.1
+        run: bin/sbt clean update dependencyLockCheck compile test package makePom -DsparkVersion=3.5.1
       - name: Build and package project on "legacy" Spark
-        run: bin/sbt clean compile package makePom
+        run: bin/sbt clean update dependencyLockCheck compile package makePom

.github/workflows/release.yaml

@@ -21,9 +21,17 @@ jobs:
           extraKey: ${{ runner.os }}
       - uses: coursier/setup-action@v1
         with:
+          path: |
+            ~/.sbt
+            ~/.ivy2/cache
+            ~/.coursier/cache/v1
+            ~/.cache/coursier/v1
+            ~/AppData/Local/Coursier/Cache/v1
+            ~/Library/Caches/Coursier/v1
+          key: ${{ runner.os }}-sbt-cache-v2-${{ hashFiles('**/*.sbt') }}-${{ hashFiles('project/build.properties') }}
           jvm: adopt:1.8
       # uses sbt-github-packages, see build.sbt
       - name: Publish with SBT
-        run: bin/sbt publish
+        run: bin/sbt dependencyLockCheck publish
       - name: Publish with SBT
-        run: bin/sbt publish -DsparkVersion=3.5.1
+        run: bin/sbt dependencyLockCheck publish -DsparkVersion=3.5.1

Makefile

@@ -21,10 +21,18 @@ test: ## Runs tests
 check: ## Runs linters and other checks
 	$(SBT) scalastyle
 
+.PHONY: check-deps
+check-deps: ## Checks dependencies are what are expected
+	$(SBT) dependencyLockCheck
+
 .PHONY: build
 build:
 	$(SBT) assembly
 
+.PHONY: relock
+relock: ## Lock dependencies based on what's currently referenced
+	$(SBT) dependencyLockWrite
+
 .PHONY: format-scala
 format-scala: ## Formats all Scala code
 	$(SBT) scalafmt