chore: use lock file for tooling scripts (denoland#14253)

This commit adds lock file for maintenance scripts in "tools/"
directory. 

The lock file is stored in "tools/deno.lock.json".

.github/workflows/ci.yml

@@ -436,9 +436,11 @@ jobs:
  run: |
  "$DENO_BIN" run --allow-env --allow-net --allow-read --allow-run \
  --allow-write --unstable \
+ --lock=tools/deno.lock.json \
  ./tools/wpt.ts setup
  "$DENO_BIN" run --allow-env --allow-net --allow-read --allow-run \
  --allow-write --unstable \
+ --lock=tools/deno.lock.json \
  ./tools/wpt.ts run --quiet --binary="$DENO_BIN"
 
  - name: Run web platform tests (release)
@@ -450,9 +452,11 @@ jobs:
  run: |
  "$DENO_BIN" run --allow-env --allow-net --allow-read --allow-run \
  --allow-write --unstable \
+ --lock=tools/deno.lock.json \
  ./tools/wpt.ts setup
  "$DENO_BIN" run --allow-env --allow-net --allow-read --allow-run \
  --allow-write --unstable \
+ --lock=tools/deno.lock.json \
  ./tools/wpt.ts run --quiet --release \
  --binary="$DENO_BIN" \
  --json=wpt.json \
@@ -486,7 +490,7 @@ jobs:
  WPT_FYI_PW: ${{ secrets.WPT_FYI_PW }}
  GITHUB_TOKEN: ${{ secrets.DENOBOT_PAT }}
  run: |
- ./target/release/deno run --allow-all \
+ ./target/release/deno run --allow-all --lock=tools/deno.lock.json \
  ./tools/upload_wptfyi.js $(git rev-parse HEAD) --ghstatus
 
  - name: Run benchmarks

.github/workflows/wpt_epoch.yml

@@ -67,12 +67,17 @@ jobs:
  - name: Run web platform tests
  shell: bash
  run: |
- deno run --unstable --allow-write --allow-read --allow-net --allow-env --allow-run ./tools/wpt.ts setup
- deno run --unstable --allow-write --allow-read --allow-net --allow-env --allow-run ./tools/wpt.ts run --binary=$(which deno) --quiet --release --json=wpt.json --wptreport=wptreport.json || true
+ deno run --unstable --allow-write --allow-read --allow-net \
+ --allow-env --allow-run --lock=tools/deno.lock.json \
+ ./tools/wpt.ts setup
+ deno run --unstable --allow-write --allow-read --allow-net \
+ --allow-env --allow-run --lock=tools/deno.lock.json \
+ ./tools/wpt.ts run \
+ --binary=$(which deno) --quiet --release --json=wpt.json --wptreport=wptreport.json || true
 
  - name: Upload wpt results to wpt.fyi
  env:
  WPT_FYI_USER: deno
  WPT_FYI_PW: ${{ secrets.WPT_FYI_PW }}
  run: |
- deno run -A ./tools/upload_wptfyi.js wptreport.json --from-raw-file
+ deno run -A --lock=tools/deno.lock.json ./tools/upload_wptfyi.js wptreport.json --from-raw-file

tools/release/01_bump_crate_versions.ts

@@ -1,4 +1,4 @@
-#!/usr/bin/env -S deno run --allow-read --allow-write --allow-run=cargo,git,deno --allow-net --no-check
+#!/usr/bin/env -S deno run --allow-read --allow-write --allow-run=cargo,git,deno --allow-net --no-check --lock=tools/deno.lock.json
 // Copyright 2018-2022 the Deno authors. All rights reserved. MIT license.
 import { DenoWorkspace } from "./deno_workspace.ts";
 import { GitLogOutput, path, semver } from "./deps.ts";

tools/release/02_create_pr.ts

@@ -1,4 +1,4 @@
-#!/usr/bin/env -S deno run --allow-read --allow-write --allow-env --allow-net --allow-run=cargo,git --no-check
+#!/usr/bin/env -S deno run --allow-read --allow-write --allow-env --allow-net --allow-run=cargo,git --no-check --lock=tools/deno.lock.json
 // Copyright 2018-2022 the Deno authors. All rights reserved. MIT license.
 import { DenoWorkspace } from "./deno_workspace.ts";
 import { createOctoKit, getGitHubRepository } from "./deps.ts";

tools/release/03_publish_crates.ts

@@ -1,4 +1,4 @@
-#!/usr/bin/env -S deno run --allow-read --allow-write --allow-run=cargo --allow-net=crates.io --no-check
+#!/usr/bin/env -S deno run --allow-read --allow-write --allow-run=cargo --allow-net=crates.io --no-check --lock=tools/deno.lock.json
 // Copyright 2018-2022 the Deno authors. All rights reserved. MIT license.
 import { DenoWorkspace } from "./deno_workspace.ts";
 import { Crate, getCratesPublishOrder } from "./deps.ts";

tools/release/04_post_publish.ts

@@ -1,4 +1,4 @@
-#!/usr/bin/env -S deno run --allow-read --allow-write --allow-run=cargo,git --allow-net --no-check
+#!/usr/bin/env -S deno run --allow-read --allow-write --allow-run=cargo,git --allow-net --no-check --lock=tools/deno.lock.json
 // Copyright 2018-2022 the Deno authors. All rights reserved. MIT license.
 import { DenoWorkspace } from "./deno_workspace.ts";
 import { createOctoKit, getGitHubRepository } from "./deps.ts";

tools/release/05_create_release_notes.ts

@@ -1,4 +1,4 @@
-#!/usr/bin/env -S deno run --allow-read --allow-write --allow-run=cargo,git --no-check
+#!/usr/bin/env -S deno run --allow-read --allow-write --allow-run=cargo,git --no-check --lock=tools/deno.lock.json
 // Copyright 2018-2022 the Deno authors. All rights reserved. MIT license.
 import { path } from "./deps.ts";
 import { DenoWorkspace } from "./deno_workspace.ts";