chore(deps): harden dependency updates (#28)

.github/workflows/coverage.yml

@@ -20,7 +20,7 @@ jobs:
           components: llvm-tools-preview
       - uses: Swatinem/rust-cache@v2.9.1
       - uses: taiki-e/install-action@cargo-llvm-cov
-      - run: cargo llvm-cov --workspace --all-targets --lcov --output-path lcov.info
+      - run: cargo llvm-cov --locked --workspace --all-targets --lcov --output-path lcov.info
       - name: Upload coverage reports to Codecov
         uses: codecov/codecov-action@v7
         if: github.event_name == 'push' && github.ref == 'refs/heads/main'