Skip to content
Beskid The Beskid Book

Beskid

Jump to a Beskid service

Beskid

Jump to a Beskid service

03.4 Fetch, lock, update

Dependency resolution, Project.lock, frozen builds, and staying reproducible."

Fetch, lock, update

Manifests declare intent. Locks declare what actually happened—so CI and your laptop stop arguing.

CommandRole
fetchResolve and materialize dependencies into obj/beskid
lockSynchronize Project.lock with current resolution
updateRefresh resolution and materialized tree when policy allows

Reference: fetch, lock, update, lockfile guide.

CI should prefer reproducible resolution:

  • --frozen — fail if lock would change
  • --locked — enforce lock consistency (see per-command docs for exact semantics)
accTitle: Project dependency resolution
accDescr: A bproj manifest enters the resolver, which writes the lockfile and materialized dependency tree used by frozen CI.
flowchart LR
  M[App.bproj] --> R[Resolver]
  R --> L[Project.lock]
  R --> O[obj/beskid materialized]
  L --> CI[CI with --frozen]

Text equivalent: The resolver reads App.bproj, synchronizes Project.lock, and materializes dependencies under obj/beskid. CI uses --frozen to require the recorded state.

Expect Project.lock updates when:

  • You add/remove/retarget dependencies
  • Path dependencies move on disk (sometimes)
  • Resolver policy or toolchain version changes resolution

Do not .gitignore the lock because “it is generated” unless you enjoy production roulette.

With source = path, drift can mean different local folders. With source = registry, inspect the selected active version in Project.lock. Workspaces add shared override policy—chapter 06.

Tree and resolution