Why do we need ignore composer.lock ?

[tucq88]

As the title, I pretty confuse why your build have that check. By that, build may install different packages that ran in local => may cause random bug

[modess]

You do not need to have the lock file ignored in your repository. The tool will check if the lock file is ignored in your .gitignore. The steps it performs are:

• Is composer.lock ignored in .gitignore?
  • No
    • run composer install
  • Yes
    • remove composer.lock (from previous run)
    • run composer update