Is there an existing issue for this?
What you expected to see, versus what you actually saw
running python .devcontainer/manual-setup-deps.py --optionally-check-lock doesn't work when in the default codespaces image, because the installed version of python is often lower than the desired one in the devcontainer.
This should be able to be fixed by adding functionality to just generate a lockfile instead of attempting to install everything (although issues with pyright pre-commit might need to be dealt with)