feat: Add enforce lockfile bootstrap command config

docs/configuration/overview.mdx

@@ -177,6 +177,14 @@ Useful in closed network environments with pre-populated pubcaches.
 
 The default is `false`.
 
+### enforceLockfile
+
+Whether to run `pub get` with `--enforce-lockfile` option or not, to force versioning from `pubspec.lock`.
+
+Useful in CI environments or when you want to ensure that all environments/machines are using the same packages' versions.
+
+The default is `false`.
+
 ## command/version
 
 Configuration for the `version` command.

packages/melos/lib/src/commands/bootstrap.dart

@@ -20,6 +20,7 @@ mixin _BootstrapMixin on _CleanMixin {
           ),
           'get',
           if (bootstrapCommandConfig.runPubGetOffline) '--offline',
+          if (bootstrapCommandConfig.enforceLockfile) '--enforce-lockfile',
         ].join(' ');
 
         logger
@@ -179,6 +180,8 @@ mixin _BootstrapMixin on _CleanMixin {
       ),
       'get',
       if (workspace.config.commands.bootstrap.runPubGetOffline) '--offline',
+      if (workspace.config.commands.bootstrap.enforceLockfile)
+        '--enforce-lockfile',
     ];
 
     final process = await startCommandRaw(

packages/melos/lib/src/workspace_configs.dart

@@ -358,6 +358,7 @@ class BootstrapCommandConfigs {
   const BootstrapCommandConfigs({
     this.runPubGetInParallel = true,
     this.runPubGetOffline = false,
+    this.enforceLockfile = false,
     this.environment,
     this.dependencies,
     this.devDependencies,
@@ -383,6 +384,13 @@ class BootstrapCommandConfigs {
         ) ??
         false;
 
+    final enforceLockfile = assertKeyIsA<bool?>(
+          key: 'enforceLockfile',
+          map: yaml,
+          path: 'command/bootstrap',
+        ) ??
+        false;
+
     final environment = assertKeyIsA<Map<Object?, Object?>?>(
       key: 'environment',
       map: yaml,
@@ -431,6 +439,7 @@ class BootstrapCommandConfigs {
     return BootstrapCommandConfigs(
       runPubGetInParallel: runPubGetInParallel,
       runPubGetOffline: runPubGetOffline,
+      enforceLockfile: enforceLockfile,
       environment: environment,
       dependencies: dependencies,
       devDependencies: devDependencies,
@@ -457,6 +466,13 @@ class BootstrapCommandConfigs {
   /// The default is `false`.
   final bool runPubGetOffline;
 
+  /// Whether `pubspec.lock` is enforced when running `flutter pub get` or not.
+  /// Useful when you want to ensure the same versions of dependencies are used
+  /// across different environments/machines.
+  ///
+  /// The default is `false`.
+  final bool enforceLockfile;
+
   /// Environment configuration to be synced between all packages.
   final Environment? environment;
 
@@ -477,6 +493,7 @@ class BootstrapCommandConfigs {
     return {
       'runPubGetInParallel': runPubGetInParallel,
       'runPubGetOffline': runPubGetOffline,
+      'enforceLockfile': enforceLockfile,
       if (environment != null) 'environment': environment!.toJson(),
       if (dependencies != null)
         'dependencies': dependencies!.map(
@@ -499,6 +516,7 @@ class BootstrapCommandConfigs {
       runtimeType == other.runtimeType &&
       other.runPubGetInParallel == runPubGetInParallel &&
       other.runPubGetOffline == runPubGetOffline &&
+      other.enforceLockfile == enforceLockfile &&
       // Extracting equality from environment here as it does not implement ==
       other.environment?.sdkConstraint == environment?.sdkConstraint &&
       const DeepCollectionEquality().equals(
@@ -517,6 +535,7 @@ class BootstrapCommandConfigs {
       runtimeType.hashCode ^
       runPubGetInParallel.hashCode ^
       runPubGetOffline.hashCode ^
+      enforceLockfile.hashCode ^
       // Extracting hashCode from environment here as it does not implement
       // hashCode
       (environment?.sdkConstraint).hashCode ^
@@ -535,6 +554,7 @@ class BootstrapCommandConfigs {
 BootstrapCommandConfigs(
   runPubGetInParallel: $runPubGetInParallel,
   runPubGetOffline: $runPubGetOffline,
+  enforceLockfile: $enforceLockfile,
   environment: $environment,
   dependencies: $dependencies,
   devDependencies: $devDependencies,

packages/melos/test/commands/bootstrap_test.dart

@@ -580,6 +580,56 @@ melos bootstrap
 Running "${pubExecArgs.join(' ')} get --offline" in workspace packages...
   > SUCCESS
 
+Generating IntelliJ IDE files...
+  > SUCCESS
+
+ -> 0 packages bootstrapped
+''',
+        ),
+      );
+    });
+
+    test('can run pub get --enforce-lockfile', () async {
+      final workspaceDir = await createTemporaryWorkspace(
+        configBuilder: (path) => MelosWorkspaceConfig.fromYaml(
+          createYamlMap(
+            {
+              'command': {
+                'bootstrap': {
+                  'enforceLockfile': true,
+                },
+              },
+            },
+            defaults: configMapDefaults,
+          ),
+          path: path,
+        ),
+      );
+
+      final logger = TestLogger();
+      final config = await MelosWorkspaceConfig.fromWorkspaceRoot(workspaceDir);
+      final workspace = await MelosWorkspace.fromConfig(
+        config,
+        logger: logger.toMelosLogger(),
+      );
+      final melos = Melos(logger: logger, config: config);
+      final pubExecArgs = pubCommandExecArgs(
+        useFlutter: workspace.isFlutterWorkspace,
+        workspace: workspace,
+      );
+
+      await runMelosBootstrap(melos, logger);
+
+      expect(
+        logger.output,
+        ignoringAnsii(
+          '''
+melos bootstrap
+  └> ${workspaceDir.path}
+
+Running "${pubExecArgs.join(' ')} get --enforce-lockfile" in workspace packages...
+  > SUCCESS
+
 Generating IntelliJ IDE files...
   > SUCCESS
 

packages/melos/test/workspace_config_test.dart

@@ -59,13 +59,15 @@ void main() {
             const {
               'runPubGetInParallel': false,
               'runPubGetOffline': true,
+              'enforceLockfile': true,
               'dependencyOverridePaths': ['a'],
             },
             workspacePath: '.',
           ),
           BootstrapCommandConfigs(
             runPubGetInParallel: false,
             runPubGetOffline: true,
+            enforceLockfile: true,
             dependencyOverridePaths: [
               createGlob('a', currentDirectoryPath: '.'),
             ],
@@ -248,6 +250,23 @@ void main() {
         );
       });
 
+      test('can decode `bootstrap` with pub get --enforce-lockfile', () {
+        expect(
+          CommandConfigs.fromYaml(
+            const {
+              'bootstrap': {
+                'enforceLockfile': true,
+              },
+            },
+            workspacePath: '.',
+          ),
+          const CommandConfigs(
+            bootstrap: BootstrapCommandConfigs(
+              enforceLockfile: true,
+            ),
+          ),
+        );
+      });
       test('can decode `version`', () {
         expect(
           CommandConfigs.fromYaml(