github actions workflow lockfiles