CI: Use --locked when calling cargo public-api

Copy the `Cargo-recent.lock` file into place in CI and in the script
use `--locked` on all invocations of `cargo` that need it.

Author: tcharding

.github/workflows/rust.yml

@@ -311,6 +311,8 @@ jobs:
     runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
+      matrix:
+        dep: [recent]
     steps:
       - name: "Checkout repo"
         uses: actions/checkout@v5
@@ -320,6 +322,8 @@ jobs:
           toolchain: ${{ needs.Prepare.outputs.nightly_version }}
       - name: "Install cargo-public-api"
         run: cargo install --locked cargo-public-api --version 0.49.0
+      - name: "Set dependencies"
+        run: cp Cargo-${{ matrix.dep }}.lock Cargo.lock
       - name: "Run API checker script"
         run: ./contrib/check-for-api-changes.sh
 

contrib/check-for-api-changes.sh

@@ -65,12 +65,12 @@ check_for_changes() {
 
 # Run cargo when --all-features is not used.
 run_cargo() {
-    RUSTDOCFLAGS="$RUSTDOCFLAGS" cargo +"$NIGHTLY" public-api --simplified "$@"
+    RUSTDOCFLAGS="$RUSTDOCFLAGS" cargo +"$NIGHTLY" --locked public-api --simplified "$@"
 }
 
 # Run cargo with all features enabled.
 run_cargo_all_features() {
-    cargo +"$NIGHTLY" public-api --simplified --all-features
+    cargo +"$NIGHTLY" --locked public-api --simplified --all-features
 }
 
 need_nightly() {