Compile dependencies

Makefile

@@ -7,10 +7,14 @@ ALL_PY_SRCS := action.py \
 all:
 	@echo "Run my targets individually!"
 
-env/pyvenv.cfg: dev-requirements.txt requirements.txt
+env/bootstrap: dev-requirements.txt
 	python3 -m venv env
 	./env/bin/python -m pip install --upgrade pip
-	./env/bin/python -m pip install --requirement dev-requirements.txt --requirement requirements.txt
+	./env/bin/python -m pip install --requirement dev-requirements.txt
+	touch env/bootstrap
+
+env/pyvenv.cfg: env/bootstrap requirements.txt
+	./env/bin/python -m pip install --requirement requirements.txt
 
 .PHONY: dev
 dev: env/pyvenv.cfg
@@ -20,3 +24,6 @@ lint: env/pyvenv.cfg $(ALL_PY_SRCS)
 	./env/bin/python -m ruff format $(ALL_PY_SRCS)
 	./env/bin/python -m ruff check --fix $(ALL_PY_SRCS)
 	./env/bin/python -m mypy action.py test/
+
+requirements.txt: requirements.in env/bootstrap
+	./env/bin/pip-compile --generate-hashes --output-file=$@ $<

dev-requirements.txt

@@ -2,3 +2,4 @@ sigstore ~= 3.6
 ruff
 mypy
 types-requests
+pip-tools

requirements.in

@@ -0,0 +1,5 @@
+pytest==8.3.4
+pytest-subtests==0.14.1
+requests==2.32.3
+cryptography==44.0.0
+sigstore-protobuf-specs==0.3.2