chore: track pubspec.lock files

[bryanoltman]

Description

This will let us have a better idea of when our deps change, which may make it easier to track down the causes of bugs. Motivated by #1612.

Type of Change

• ✨ New feature (non-breaking change which adds functionality)
• 🛠️ Bug fix (non-breaking change which fixes an issue)
• ❌ Breaking change (fix or feature that would cause existing functionality to change)
• 🧹 Code refactor
• ✅ Build configuration change
• 📝 Documentation
• 🗑️ Chore

[bryanoltman]

Note: I didn't do this in package:scoped because there's a chance that might end up on pub.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (bcb2c57) 100.00% compared to head (b2bdd90) 100.00%.

❗ Current head b2bdd90 differs from pull request most recent head bccc7ed. Consider uploading reports for the commit bccc7ed to get more accurate results

Additional details and impacted files

@@            Coverage Diff            @@
##              main     #1613   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files          155       155           
  Lines         4825      4825           
=========================================
  Hits          4825      4825           

Flag	Coverage Δ
redis_client	100.00% <ø> (ø)
shorebird_cli	100.00% <ø> (ø)
shorebird_code_push_client	100.00% <ø> (ø)
shorebird_code_push_protocol	100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[felangel]

Thoughts on only doing this for the CLI since we probably don't want to lock deps for packages like redis_client, shorebird_code_push etc.

https://dart.dev/guides/libraries/private-files

[bryanoltman]

Thoughts on only doing this for the CLI since we probably don't want to lock deps for packages like redis_client, shorebird_code_push etc.

https://dart.dev/guides/libraries/private-files

Yep, makes sense. Wanted to do this to be thorough, but I imagine we'll catch everything that changes as a transitive dependency in shorebird_cli's pubspec.lock.