Cargo.lock missing in release tarball of 1.68.0rc2

[NickCao]

Description

Cargo.lock should be included in the release tarball for reproducible builds.

Steps to reproduce

curl -sL https://github.com/matrix-org/synapse/releases/download/v1.68.0rc2/matrix-synapse-1.68.0rc2.tar.gz | tar tzf - | grep Cargo

Homeserver

not applicable

Synapse Version

1.68.0rc2

Installation Method

No response

Platform

not applicable

Relevant log output

not applicable

Anything else that would be useful to know?

No response

[DMRobertson]

I think we need a top-level Cargo.lock here?

synapse/pyproject.toml

Lines 88 to 90 in 11ebcc8

	{ path = "Cargo.toml", format = "sdist" },
	{ path = "rust/Cargo.toml", format = "sdist" },
	{ path = "rust/Cargo.lock", format = "sdist" },

[NickCao]

As this whole project is a single cargo workspace, there should be one and only one top-level Cargo.lock for all member crates.