fix: install Dioxus CLI with locked dependencies (#698)

Author: DamianReeves

.github/workflows/release.yml

@@ -67,7 +67,7 @@ jobs:
           key: morphir-live-release
 
       - name: Install dioxus-cli
-        run: cargo install dioxus-cli
+        run: cargo install dioxus-cli --locked
 
       - name: Build WASM release
         working-directory: crates/morphir-live

tests/ci/test_release_workflow.py

@@ -88,6 +88,9 @@ def test_packaging_jobs_support_independent_retries(self) -> None:
         self.assertIn("overwrite: true", self.workflow)
         self.assertIn("retention-days: 7", self.workflow)
 
+    def test_dioxus_cli_install_uses_published_lockfile(self) -> None:
+        self.assertIn("cargo install dioxus-cli --locked", self.workflow)
+
     def test_cli_checksum_uses_archive_basename(self) -> None:
         self.assertIn("cd release-assets", self.workflow)
         self.assertIn(