Add dependency lock files #1

	# This is run to avoid an edge case where the latest version of a (probably sub)
	# dependency being yanked leads to pip failing to backtrack the dep.
	# This happened with `cachecontrol==0.12.12 ; python_version >= "3.7" and python_version < "4.0"`.
	name: Verify dependency locks

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	on:
	pull_request:
	branches:
	- master
	paths: ["requirements.txt", "dev-requirements.txt"]

	jobs:
	verify-pr-dep-changes:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@b32f140b0c872d58512e0a66172253c302617b90
	with:
	submodules: "true"

	- name: Set up Python 3.11
	uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c
	with:
	python-version: "3.11"

	- name: install prerequisites
	run: \|
	python -m pip install --upgrade pip wheel
	python -m pip install -r ./python/base-requirements/nox.txt

	- name: Verify dependency locks
	run: python -m nox -s verify-locks

Provide feedback