Merge remote-tracking branch 'make/main' into graph-init

Makefile

@@ -50,7 +50,7 @@ help:
 	@echo ""
 	@echo "publish [branch=]"
 	@echo "   pushes the given branch including tags to origin, for CI to publish based on tags. (Default: branch='main')"
-	@echo "   Typically used after `make bumpversion`"
+	@echo "   Typically used after 'make bumpversion'"
 	@echo ""
 	@echo "prepare-release"
 	@echo "   run tasks to prepare a release"
@@ -89,6 +89,11 @@ install-dev:
 install:
 	pdm sync --prod
 
+lock: pdm.lock
+
+pdm.lock: pyproject.toml
+	pdm lock
+
 .PHONY: test
 test:
 	${INVENV} pytest -vv ${tests}
@@ -145,7 +150,7 @@ publish:
 prepare-release: update-changelog tests/requirements-testing.lock
 
 # we use lock extension so that dependabot doesn't pick up changes in this file
-tests/requirements-testing.lock: pyproject.toml
+tests/requirements-testing.lock: pyproject.toml pdm.lock
 	pdm export --dev --format requirements --output $@
 
 .PHONY: update-changelog