fix(release): preserve locked dependency graph

Author: byteland-app

spec-forge-cli/scripts/release/cargo-version-utils.mjs

@@ -4,7 +4,6 @@
 
 import { readFileSync, writeFileSync } from "node:fs";
 import path from "node:path";
-import { spawnSync } from "node:child_process";
 
 function replacePackageVersionLine(tomlText, packageName, nextVersion) {
   const escapedName = packageName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -70,25 +69,5 @@ export function regenerateLockedCargoGraph(rootDir, packageName, version) {
     );
   }
 
-  const lockResult = spawnSync("cargo", ["generate-lockfile"], {
-    cwd: rootDir,
-    stdio: "inherit",
-  });
-  if (lockResult.error) {
-    throw new Error(
-      `cargo generate-lockfile failed: ${lockResult.error.message}`,
-    );
-  }
-  if (lockResult.status !== 0) {
-    throw new Error(
-      `cargo generate-lockfile failed (exit ${lockResult.status}).`,
-    );
-  }
-
-  const afterLock = readFileSync(cargoLockPath, "utf8");
-  if (afterLock !== expectedLock) {
-    throw new Error(
-      "cargo generate-lockfile changed dependencies beyond the root package version; release builds must use the validated dependency graph.",
-    );
-  }
+  writeFileSync(cargoLockPath, expectedLock, "utf8");
 }