Dependency Management Revisited: Lockfiles, Vendoring, and What They Actually Guarantee

What Led Me Here You push a change that works locally. The tests pass. CI runs and fails. You rerun the pipeline without touching the code, and this time it succeeds. Nothing changed, yet the outcome