fix CI dependency setup

Author: Henry

.github/workflows/basic-ci.yml

@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Set up Python 3.12
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 
@@ -98,7 +98,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Set up Python 3.12
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'
           cache: pip
@@ -108,7 +108,7 @@ jobs:
 
       - name: Install development dependencies
         working-directory: ./backend_api_python
-        run: python -m pip install --disable-pip-version-check -r requirements-dev.txt
+        run: python -m pip install --disable-pip-version-check -r requirements.lock -r requirements-dev.txt
 
       - name: Python import check
         if: matrix.shard_index == 0
@@ -173,7 +173,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Set up Python 3.12
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 

.github/workflows/openapi-ci.yml

@@ -34,7 +34,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Set up Python 3.12
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'
           cache: pip

.github/workflows/security-ci.yml

@@ -25,7 +25,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Set up Python 3.12
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'
           cache: pip

backend_api_python/README.md

@@ -125,7 +125,7 @@ Create an environment and install development dependencies:
 ```bash
 python -m venv .venv
 python -m pip install --upgrade pip
-python -m pip install -r requirements-dev.txt
+python -m pip install -r requirements.lock -r requirements-dev.txt
 ```
 
 Apply migrations:

backend_api_python/requirements-dev.txt

@@ -1,5 +1,3 @@
--r requirements.lock
-
 bandit[toml]>=1.8.6,<2
 pip-audit>=2.9.0,<3
 pytest>=9.0.3,<10

backend_api_python/tests/test_process_roles.py

@@ -45,6 +45,11 @@ def test_config_loader_does_not_override_supervisor_environment(monkeypatch):
     from app.utils import config_loader
 
     calls = []
+    monkeypatch.setattr(
+        config_loader.Path,
+        "exists",
+        lambda path: path.name == ".env",
+    )
     monkeypatch.setattr(
         dotenv,
         "load_dotenv",