Pascal Welsch @pascalwelsch.com · Mar 25 Using the pubspec.lock is not enough. Also the flutter version needs to be locked. When the flutter version changes, its locked dependencies change. This forces pub get to find new compatible packages. This updates some packages regardless of what is defined in the lockfile.
1 likes 2 replies
?
Replies
There is a special flag to prevent this dangerous default behaviour, which everyone should use in their CD pipelines: flutter pub get --enforce-lockfile
Nice point , I’ll update accordingly