Bug 1867872 - Ensure wrench-deps fails when it should. r=taskgraph-reviewers,firefox-build-system-reviewers,jcristau,sergesanspaille

The wrench-deps tasks should trigger when webrender-related Cargo.tomls
are updated, and it should fail when they are updated, but the
corresponding Cargo.lock isn't.

Differential Revision: https://phabricator.services.mozilla.com/D195317

taskcluster/ci/toolchain/misc.yml

@@ -380,6 +380,7 @@ wrench-deps:
         script: wrench-deps-vendoring.sh
         sparse-profile: null
         resources:
+            - 'gfx/wr/**/Cargo.toml'
             - 'gfx/wr/Cargo.lock'
             - 'gfx/wr/ci-scripts/install-meson.sh'
         toolchain-artifact: public/build/wrench-deps.tar.zst

taskcluster/scripts/misc/wrench-deps-vendoring.sh

@@ -12,7 +12,7 @@ cd $GECKO_PATH
 export PATH=$PATH:$MOZ_FETCHES_DIR/rustc/bin:$HOME/.cargo/bin
 cd gfx/wr/
 mkdir .cargo
-cargo vendor --sync ./Cargo.toml > .cargo/config
+cargo vendor --locked --sync ./Cargo.toml > .cargo/config
 mkdir wrench-deps
 mv vendor .cargo wrench-deps/
 mkdir wrench-deps/cargo-apk