diff --git a/.github/workflows/prepare-release.yml b/.github/workflows/prepare-release.yml
index 32069613a..f205b271b 100644
--- a/.github/workflows/prepare-release.yml
+++ b/.github/workflows/prepare-release.yml
@@ -149,8 +149,10 @@ jobs:
           set -euo pipefail
           cargo build --workspace --jobs "$HOST_CARGO_JOBS"
           cargo build --workspace --manifest-path test-integration/Cargo.toml --jobs "$HOST_CARGO_JOBS"
-          cargo metadata --locked --no-deps --format-version 1 >/dev/null
-          cargo metadata --manifest-path test-integration/Cargo.toml --locked --no-deps --format-version 1 >/dev/null
+          # Full dependency resolution so --locked actually validates the
+          # lockfiles (--no-deps skips resolution and never trips --locked).
+          cargo metadata --locked --format-version 1 >/dev/null
+          cargo metadata --manifest-path test-integration/Cargo.toml --locked --format-version 1 >/dev/null
 
       - name: Commit and push release branch
         working-directory: magicblock-validator