This uses `--locked` on CI to ensure that if the lock file needs changing it's reflected in the PR instead of letting CI accidentally and silently update the lock file for us.
This uses `--locked` on CI to ensure that if the lock file needs changing it's reflected in the PR instead of letting CI accidentally and silently update the lock file for us.