chore: add uv audit to CI workflows

.github/workflows/benchmarks.yaml

@@ -49,13 +49,15 @@ jobs:
         working-directory: ./pr
         run: |
           uv sync --group test
+          uv audit --locked
           uv run pytest --benchmark-only --benchmark-save=pr
 
       - name: Run benchmarks on main
         working-directory: ./main
         continue-on-error: true
         run: |
           uv sync --group test
+          uv audit --locked
           uv run pytest --benchmark-only --benchmark-save=base
 
       - name: Compare results

.github/workflows/docker.yaml

@@ -41,6 +41,9 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@v4
 
+      - name: Audit dependencies
+        run: uv audit --locked
+
       - name: Set package version
         run: |
           VERSION=$(uvx dunamai from git --style semver)

.github/workflows/docs.yaml

@@ -48,6 +48,9 @@ jobs:
           VERSION=$(uv run hatch version)
           echo "version=$VERSION" >> $GITHUB_OUTPUT
 
+      - name: Audit dependencies
+        run: uv audit --locked
+
       - name: Set git credentials
         run: |
           git config --global user.name "${{ github.actor }}"

.github/workflows/lint-test.yaml

@@ -38,6 +38,9 @@ jobs:
       - name: Install project
         run: uv sync --group test --group docs
 
+      - name: Audit dependencies
+        run: uv audit --locked
+
       - name: Check uv lockfile
         run: uv lock --check
         if: always()

.github/workflows/pypi.yaml

@@ -39,6 +39,9 @@ jobs:
           enable-cache: true
           cache-dependency-glob: "uv.lock"
 
+      - name: Audit dependencies
+        run: uv audit --locked
+
       - name: Build wheel
         id: wheel
         run: |