dependenies.lock is updated every time I reconfigure the project (PACMAN-868)

[Barabas5532]

The Component Manager version

v1.5.2

ESP-IDF Version

ESP-IDF v5.1.2

python Version

Python 3.12.3

Operating System

Arch Linux

Browser (for https://components.espressif.com Issues)

No response

Description

After building the project, dependencies are automatically updated.

The diff of my lock file:

diff --git a/firmware/dependencies.lock b/firmware/dependencies.lock
index 98f2e133..d2c2eb43 100644
--- a/firmware/dependencies.lock
+++ b/firmware/dependencies.lock
@@ -1,15 +1,15 @@
 dependencies:
   espressif/mdns:
-    component_hash: 810ec139689ae93bf42520d05de4855fbb68f7140ef67797d91d8d61829589cb
+    component_hash: 9ff9c578fc3a5ea3c68e807233e47f2ce6b2492a92d7a9356ae5c29ab45f0fde
     source:
       service_url: https://api.components.espressif.com/
       type: service
-    version: 1.2.2
+    version: 1.3.0
   idf:
     component_hash: null
     source:
       type: idf
     version: 5.1.2
-manifest_hash: f07478b4217cadfb47c3d14602d60c69fe72bea2bcf6d412a6d50a2eb6af3c56
+manifest_hash: f2d6e0d52b55cc65c3c08e684f6a2c5691fb6492c0de06a8b57c804bc54956cb
 target: esp32
 version: 1.0.0

Similar to #29

To Reproduce

1. Checkout project
2. Build
3. git restore dependencies.lock
4. idf.py reconfigure

Both the initial build and the reconfigure update the dependencies.lock with this message:

Manifest files have changed, solving dependencies.
....Updating lock file at /path/to/repo/firmware/dependencies.lock

Expected behaviour

Lock file is not updated unless I explicitly change a dependency.

Additional info

No response

I have checked existing issues and online Documentation

• [X] I confirm I have checked existing issues and online Documentation.