From a87a021d5bc16f289ceed5f2aa5a843d12b391cb Mon Sep 17 00:00:00 2001
From: Dan Guido <dan@trailofbits.com>
Date: Wed, 6 Aug 2025 16:47:38 -0700
Subject: [PATCH] Fix Docker build: use --locked without --frozen
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The --frozen and --locked flags are mutually exclusive in uv.
Using --locked alone provides the stricter enforcement we want -
it asserts the lockfile won't change and errors if it would.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 25e8625c..00f87b66 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -25,7 +25,7 @@ COPY --from=ghcr.io/astral-sh/uv:latest /uv /bin/uv
 
 # Copy dependency files and install in single layer for better optimization
 COPY pyproject.toml uv.lock ./
-RUN uv sync --frozen --locked --no-dev
+RUN uv sync --locked --no-dev
 
 # Copy application code
 COPY . .