Fix: prevent make.py from updating uv.lock

Replace the direct usage of ./make.py with uv run --frozen make.py to
ensure dependencies remain locked during execution.

Author: MarcosBorgesPhD

.github/workflows/build-guidelines.yml

@@ -39,7 +39,7 @@ jobs:
       - name: Build documentation
         run: |
           mkdir -p build
-          ./make.py 2>&1 | tee build/build.log
+          uv run --frozen make.py 2>&1 | tee build/build.log
           # Check for a wide range of error indicators in the log
           if grep -q -E "Traceback" build/build.log; then
             echo "::error::Build errors detected in log"

README.md

@@ -9,13 +9,16 @@ This repository contains Coding Guidelines for writing Safety Critical Rust, dev
 
 The Safety-Critical Rust Coding Guidelines website uses `Sphinx` and `Sphinx-Needs` to build a rendered version of the coding guidelines, and `uv` to install and manage Python dependencies (including Sphinx itself). To simplify building the rendered version, we created a script called `make.py` that takes care of invoking Sphinx with the right flags.
 
-- On Linux and macOS, build the rendered version by running `./make.py`.
-- On Windows systems, build the rendered version by running `uv run make.py`.
+Build the rendered version by running:
+
+```shell
+uv run --frozen make.py
+```
 
 By default, Sphinx uses incremental rebuilds to generate the content that
 changed since the last invocation. If you notice a problem with incremental
 rebuilds, pass the `-c` flag to clear the existing artifacts before
-building `./make.py -c`.
+building `uv run --frozen make.py -c`.
 
 The following output is generated:
 
@@ -30,7 +33,7 @@ The following output is generated:
 If you're working without internet access or want to avoid reaching out to remote resources, you can pass the `--offline` flag:
 
 ```shell
-./make.py --offline
+uv run --frozen make.py --offline
 ```
 
 This prevents the build system from attempting to fetch remote resources, such as updates to the specification. Use this flag when you need reproducible or air-gapped builds.
@@ -48,7 +51,7 @@ The file is checked against the current live version of the specification, which
 If you run into this while developing a coding guideline, you may ignore this error by running the build with:
 
 ```shell
-./make.py --ignore-spec-lock-diff
+uv run --frozen make.py --ignore-spec-lock-diff
 ```
 
 #### Auditing the difference

docs/bibliography.md

@@ -116,13 +116,13 @@ bibliography_fail_on_inconsistent = True
 
 ```bash
 # Normal build (no URL validation)
-./make.py
+uv run --frozen make.py
 
 # Build with URL validation (for CI)
-./make.py --validate-urls
+uv run --frozen make.py --validate-urls
 
 # Debug build with URL validation
-./make.py --debug --validate-urls
+uv run --frozen make.py --debug --validate-urls
 ```
 
 ## GitHub Issue Template

docs/fls-audit.md

@@ -124,7 +124,7 @@ The FLS repo and delta binaries are cached under `./.cache/fls-audit/` and are s
 After completing the checklist, update the local `spec.lock`:
 
 ```shell
-./make.py --update-spec-lock-file
+uv run --frozen make.py --update-spec-lock-file
 ```
 
 Open a new PR with only the changes needed to rationalize the guidelines with

exts/coding_guidelines/fls_checks.py

@@ -49,7 +49,7 @@ def check_fls(app, env):
             error_message += "\n\tuv run python scripts/fls_audit.py"
             error_message += "\nIf the audit tool reports missing baseline metadata, provide --baseline-fls-commit/--current-fls-commit or set GITHUB_TOKEN when using deployment offsets."
             error_message += "\nOnce resolved, you may run the following to update the local spec lock file:"
-            error_message += "\n\t./make.py --update-spec-lock-file"
+            error_message += "\n\tuv run --frozen make.py --update-spec-lock-file"
             logger.error(error_message)
             raise FLSValidationError(error_message)
     # Check if all referenced FLS IDs exist

make.py

@@ -1,4 +1,3 @@
-#!/usr/bin/env -S uv run
 # SPDX-License-Identifier: MIT OR Apache-2.0
 # SPDX-FileCopyrightText: The Coding Guidelines Subcommittee Contributors
 

scripts/generate-rst-comment.py

@@ -648,7 +648,7 @@ def generate_comment(
    With `:glob:` you do not need to update the index per guideline.
 6. **Build locally** to verify the guideline renders correctly:
    ```bash
-   ./make.py
+   uv run --frozen make.py
    ```
 7. **Commit and push** your changes:
    ```bash

scripts/split_guidelines.py

@@ -479,7 +479,7 @@ def main():
                 old_file = src_dir / f"{chapter}.rst"
                 if old_file.exists():
                     print(f"     rm {old_file}")
-        print("3. Build the documentation to verify: ./make.py")
+        print("3. Build the documentation to verify: uv run --frozen make.py")
         print("4. Update any tooling (guideline-from-issue.py, etc.)")
     else:
         print("\n=== To apply changes ===")