fix(ci): enforce automation checks

.github/workflows/build.yml

@@ -470,7 +470,7 @@ jobs:
           key: ${{ runner.os }}-${{ runner.arch }}-pub-v2-${{ hashFiles('pubspec.yaml', 'pubspec.lock') }}
 
       - name: Install dependencies
-        run: flutter pub get --no-example
+        run: flutter pub get --enforce-lockfile --no-example
 
       - name: Install patched Flutter engine (DComp)
         shell: pwsh
@@ -768,7 +768,7 @@ jobs:
         run: sudo gem install fpm
 
       - name: Install dependencies
-        run: flutter pub get --no-example
+        run: flutter pub get --enforce-lockfile --no-example
 
       - name: Build Linux arm64
         run: flutter build linux --release --dart-define=ENABLE_UPDATE_CHECK=true ${{ env.SENTRY_DART_DEFINE }} ${{ env.GIT_COMMIT_DART_DEFINE }} ${{ env.SENTRY_ENV_DART_DEFINE }} --dart-define=SENTRY_DIST=github-linux-arm64 ${{ env.DONATIONS_DART_DEFINE }} --split-debug-info=debug-info/linux-arm64

.github/workflows/ci.yml

@@ -40,26 +40,14 @@ jobs:
           flutter pub get
 
       - name: Verify generated files committed
-        run: |
-          scripts/codegen.sh
-          if ! git diff --exit-code lib/; then
-            echo "::error::Generated files (.g.dart / .freezed.dart) are out of date."
-            echo "Run 'scripts/codegen.sh' and commit the result."
-            exit 1
-          fi
+        run: scripts/codegen.sh --check
 
       - name: Verify formatting
         run: |
-          # Find all Dart files excluding generated files
-          find lib $([ -d test ] && echo test) -name "*.dart" ! -name "*.g.dart" ! -name "*.freezed.dart" -type f 2>/dev/null | while IFS= read -r file; do
-            files_found=true
-            break
-          done
-          if [ "$files_found" != "true" ]; then
-            echo "No Dart files found to format"
-            exit 0
-          fi
-          find lib $([ -d test ] && echo test) -name "*.dart" ! -name "*.g.dart" ! -name "*.freezed.dart" -type f 2>/dev/null -print0 | xargs -0 dart format --output=none --set-exit-if-changed
+          paths=(lib)
+          [ ! -d test ] || paths+=(test)
+          find "${paths[@]}" -name "*.dart" ! -name "*.g.dart" ! -name "*.freezed.dart" -type f -print0 |
+            xargs -0 -r dart format --output=none --set-exit-if-changed
       - name: Analyze code
         run: |
           # Run flutter analyze

.github/workflows/release.yml

@@ -71,7 +71,7 @@ jobs:
 
       - name: Trigger build workflow
         run: |
-          curl -L \
+          curl --fail-with-body -L \
             -X POST \
             -H "Accept: application/vnd.github+json" \
             -H "Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" \

.github/workflows/update-packages.yml

@@ -20,7 +20,7 @@ jobs:
         id: release
         run: |
           VERSION="${{ github.event.release.tag_name || github.ref_name }}"
-          curl -L -o plezy-macos.dmg \
+          curl --fail-with-body -L -o plezy-macos.dmg \
             "https://github.com/edde746/plezy/releases/download/$VERSION/plezy-macos.dmg"
           SHA256=$(shasum -a 256 plezy-macos.dmg | cut -d' ' -f1)
           echo "version=$VERSION" >> $GITHUB_OUTPUT