From 6a1454d79fceed5629264bc524128efcb99b4880 Mon Sep 17 00:00:00 2001
From: Mihai Nueleanu <hey@dotmethod.me>
Date: Fri, 30 Oct 2026 22:48:26 +0000
Subject: [PATCH] fix(ci): keep Cargo.lock in step with the released version

The publish job bumped Cargo.toml to 0.2.0, committed it, and left Cargo.lock
recording 0.1.0, because nothing regenerated the lock. The next --locked check
then died with 'cannot update the lock file ... because --locked was passed'.

- Cargo.lock carries the workspace version now (0.2.0), which fixes main.
- The publish job runs 'cargo update --workspace' after the sed, with the
  pinned toolchain installed, so the next bump cannot drift again.
---
 .github/workflows/release.yaml | 11 +++++++++++
 Cargo.lock                     |  2 +-
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 81557dc..3a234d7 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -205,6 +205,12 @@ jobs:
         with:
           name: release-notes
 
+      - name: Rust toolchain
+        # needed only to keep Cargo.lock honest when the version is bumped
+        uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master 2026-10-30
+        with:
+          toolchain: stable
+
       - name: Checksums
         run: |
           cd dist
@@ -220,6 +226,11 @@ jobs:
           git config user.name "KubeTitan Release"
           git config user.email "release@kubetitan.com"
           sed -i "s/^version = \".*\"/version = \"$VERSION\"/" Cargo.toml
+          # Cargo.lock records the workspace package's own version, so bumping
+          # Cargo.toml alone leaves the lock stale and every later `--locked`
+          # check dies with "cannot update the lock file". `--workspace` touches
+          # only the members, so no dependency version moves.
+          cargo update --workspace
           git add Cargo.toml Cargo.lock
           # [skip ci] keeps this push from starting the workflow again
           git commit -m "chore(release): v$VERSION [skip ci]" || echo "nothing to commit"
diff --git a/Cargo.lock b/Cargo.lock
index da19ad3..71b27d1 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2306,7 +2306,7 @@ dependencies = [
 
 [[package]]
 name = "kubetitan"
-version = "0.1.0"
+version = "0.2.0"
 dependencies = [
  "anyhow",
  "base64",