Commit MODULE.bazel.lock files (#4484)

**What type of PR is this?**

> Other

**What does this PR do? Why is it needed?**

This ensures rules_go developers always see the same bits when
downloading
files. We should see a security error if a module version changes
upstream.

**Which issues(s) does this PR fix?**

Fixes #4483

**Other notes for review**

Author: jayconrod

.gitignore

@@ -5,5 +5,3 @@
 /examples/*/bazel-*
 /.ijwb/
 /tests/bcr/.ijwb/
-
-MODULE.bazel.lock

MODULE.bazel.lock

@@ -5,6 +5,7 @@
 # there, but it is required to build the examples.
 
 common:ci --enable_bzlmod
+common:ci --lockfile_mode=error
 common:ci --color=no
 common:ci --verbose_failures
 common:ci --sandbox_debug

examples/.bazelrc

@@ -0,0 +1 @@
+8.4.2

examples/basic_gazelle/.bazelversion

@@ -0,0 +1 @@
+8.4.2

examples/basic_gazelle/MODULE.bazel.lock

@@ -1,2 +1,3 @@
 common --enable_bzlmod
+common --lockfile_mode=error
 build --@my_rules_go//go/toolchain:sdk_version=1.23.1

examples/hello/.bazelversion

@@ -18,8 +18,8 @@ local_path_override(
     path = "../..",
 )
 
-bazel_dep(name = "gazelle", version = "0.33.0")
-bazel_dep(name = "protobuf", version = "3.19.6")
+bazel_dep(name = "gazelle", version = "0.36.0")
+bazel_dep(name = "protobuf", version = "29.0-rc2.bcr.1")
 bazel_dep(name = "rules_shell", version = "0.4.1")
 
 # Required with --incompatible_enable_proto_toolchain_resolution.
@@ -57,8 +57,8 @@ use_repo(go_sdk, "go_host_compatible_sdk_label")
 go_deps = use_extension("@gazelle//:extensions.bzl", "go_deps")
 go_deps.module(
     path = "google.golang.org/grpc",
-    sum = "h1:pnP7OclFFFgFi4VHQDQDaoXUVauOFyktqTsqqgzFKbc=",
-    version = "v1.40.1",
+    sum = "h1:OgPcDAFKHnH8X3O4WcO4XUc8GRDeKsKReqbQtiCj7N8=",
+    version = "v1.67.3",
 )
 
 # Read in go_tool_test.sh.