Merge branch 'main' into dev/Mathi/CliPd

Mathiyarasy · web-flow · commit 805196fcf82c · 2026-05-13T17:45:00.000+05:30
diff --git a/.devcontainer/devcontainer-lock.json b/.devcontainer/devcontainer-lock.json
@@ -6,4 +6,4 @@
       "integrity": "sha256:ce078b7bf7d9ef3bcb9813b32103795d8d72172446890b64772cbe1dec6baafd"
     }
   }
-}
+}
diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
@@ -27,7 +27,8 @@
 		"vscode": {
 			"extensions": [
 				"dbaeumer.vscode-eslint",
-				"GitHub.vscode-pull-request-github"
+				"GitHub.vscode-pull-request-github",
+				"hbenl.vscode-mocha-test-adapter"
 			]
 		},
 		"codespaces": {
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,12 @@ Notable changes.
 
 ## May 2026
 
+### [0.87.0]
+- Graduate lockfile from experimental to stable: lockfiles are now generated by default on `build` and `up`. (https://github.com/devcontainers/cli/issues/1195)
+  - New `--no-lockfile` flag to opt out of lockfile generation.
+  - New `--frozen-lockfile` flag to ensure the lockfile exists and remains unchanged.
+  - `--experimental-lockfile` and `--experimental-frozen-lockfile` are deprecated (still accepted with a warning).
+
 ### [0.86.1]
 - Do not write features supplied via `--additional-features` to the lockfile. (https://github.com/microsoft/vscode-remote-release/issues/11616)
 
diff --git a/README.md b/README.md
@@ -15,11 +15,15 @@ This CLI is in active development. Current status:
 - [x] `devcontainer run-user-commands` - Runs lifecycle commands like `postCreateCommand`
 - [x] `devcontainer read-configuration` - Outputs current configuration for workspace
 - [x] `devcontainer exec` - Executes a command in a container with `userEnvProbe`, `remoteUser`, `remoteEnv`, and other properties applied
+- [x] `devcontainer outdated` - Show outdated lockfile features
+- [x] `devcontainer upgrade` - Upgrade lockfile features
 - [x] `devcontainer features <...>` - Tools to assist in authoring and testing [Dev Container Features](https://containers.dev/implementors/features/)
 - [x] `devcontainer templates <...>` - Tools to assist in authoring and testing [Dev Container Templates](https://containers.dev/implementors/templates/)
 - [ ] `devcontainer stop` - Stops containers
 - [ ] `devcontainer down` - Stops and deletes containers
 
+Lockfiles (`.devcontainer-lock.json`) are generated by default when running `build` or `up` to pin feature versions for reproducible builds. Use `--no-lockfile` to opt out, or `--frozen-lockfile` to enforce an existing lockfile.
+
 ## Try it out
 
 We'd love for you to try out the dev container CLI and let us know what you think. You can quickly try it out in just a few simple steps, either by using the install script, installing its npm package, or building the CLI repo from sources (see "[Build from sources](#build-from-sources)").
diff --git a/docs/contributing-code.md b/docs/contributing-code.md
@@ -95,6 +95,14 @@ node devcontainer.js run-user-commands --workspace-folder <path>
 
 Tests use [Mocha](https://mochajs.org/) and [Chai](https://www.chaijs.com/) and require Docker because they create and tear down real containers.
 
+Before running tests, package the CLI into a tarball:
+
+```sh
+npm run package
+```
+
+Tests install the CLI from the generated `devcontainers-cli-<version>.tgz` and shell out to it as a subprocess. You must re-run `npm run package` after any code change so that the tarball reflects your latest changes. Running `npm run compile` alone is **not** sufficient — it builds the JavaScript output but does not create the tarball that the tests depend on.
+
 ```sh
 npm test                          # all tests
 npm run test-container-features   # Features tests only
diff --git a/package.json b/package.json
@@ -1,7 +1,7 @@
 {
 	"name": "@devcontainers/cli",
 	"description": "Dev Containers CLI",
-	"version": "0.86.1",
+	"version": "0.87.0",
 	"bin": {
 		"devcontainer": "devcontainer.js"
 	},
diff --git a/src/spec-configuration/containerFeaturesConfiguration.ts b/src/spec-configuration/containerFeaturesConfiguration.ts
@@ -193,8 +193,8 @@ export interface ContainerFeatureInternalParams {
 	env: NodeJS.ProcessEnv;
 	skipFeatureAutoMapping: boolean;
 	platform: NodeJS.Platform;
-	experimentalLockfile?: boolean;
-	experimentalFrozenLockfile?: boolean;
+	noLockfile?: boolean;
+	frozenLockfile?: boolean;
 }
 
 // TODO: Move to node layer.
@@ -485,7 +485,7 @@ export async function generateFeaturesConfig(params: ContainerFeatureInternalPar
 
 	const ociCacheDir = await prepareOCICache(dstFolder);
 
-	const { lockfile, initLockfile } = await readLockfile(config);
+	const { lockfile } = params.noLockfile ? { lockfile: undefined } : await readLockfile(config);
 
 	const processFeature = async (_userFeature: DevContainerFeature) => {
 		return await processFeatureIdentifier(params, configPath, workspaceRoot, _userFeature, lockfile);
@@ -508,7 +508,9 @@ export async function generateFeaturesConfig(params: ContainerFeatureInternalPar
 	await fetchFeatures(params, featuresConfig, dstFolder, ociCacheDir, lockfile);
 
 	await logFeatureAdvisories(params, featuresConfig);
-	await writeLockfile(params, config, await generateLockfile(featuresConfig, config, additionalFeatures), initLockfile);
+	if (!params.noLockfile) {
+		await writeLockfile(params, config, await generateLockfile(featuresConfig, config, additionalFeatures));
+	}
 	return featuresConfig;
 }
 
diff --git a/src/spec-configuration/lockfile.ts b/src/spec-configuration/lockfile.ts
@@ -45,7 +45,11 @@ export async function generateLockfile(featuresConfig: FeaturesConfig, config?:
 		});
 }
 
-export async function writeLockfile(params: ContainerFeatureInternalParams, config: DevContainerConfig, lockfile: Lockfile, forceInitLockfile?: boolean): Promise<string | undefined> {
+export async function writeLockfile(params: ContainerFeatureInternalParams, config: DevContainerConfig, lockfile: Lockfile): Promise<string | undefined> {
+	if (params.noLockfile) {
+		return;
+	}
+
 	const lockfilePath = getLockfilePath(config);
 	const oldLockfileContent = await readLocalFile(lockfilePath)
 		.catch(err => {
@@ -54,14 +58,10 @@ export async function writeLockfile(params: ContainerFeatureInternalParams, conf
 			}
 		});
 
-	if (!forceInitLockfile && !oldLockfileContent && !params.experimentalLockfile && !params.experimentalFrozenLockfile) {
-		return;
-	}
-
 	// Trailing newline per POSIX convention
 	const newLockfileContentString = JSON.stringify(lockfile, null, 2) + '\n';
 	const newLockfileContent = Buffer.from(newLockfileContentString);
-	if (params.experimentalFrozenLockfile && !oldLockfileContent) {
+	if (params.frozenLockfile && !oldLockfileContent) {
 		throw new Error('Lockfile does not exist.');
 	}
 	// Normalize the existing lockfile through JSON.parse -> JSON.stringify to produce
@@ -76,7 +76,7 @@ export async function writeLockfile(params: ContainerFeatureInternalParams, conf
 		}
 	}
 	if (!oldLockfileNormalized || oldLockfileNormalized !== newLockfileContentString) {
-		if (params.experimentalFrozenLockfile) {
+		if (params.frozenLockfile) {
 			throw new Error('Lockfile does not match.');
 		}
 		await writeLocalFile(lockfilePath, newLockfileContent);
diff --git a/src/spec-node/containerFeatures.ts b/src/spec-node/containerFeatures.ts
@@ -147,8 +147,8 @@ export async function getExtendImageBuildInfo(params: DockerResolverParameters,
 	const platform = params.common.cliHost.platform;
 
 	const cacheFolder = await getCacheFolder(params.common.cliHost);
-	const { experimentalLockfile, experimentalFrozenLockfile } = params;
-	const featuresConfig = await generateFeaturesConfig({ ...params.common, platform, cacheFolder, experimentalLockfile, experimentalFrozenLockfile }, dstFolder, config.config, additionalFeatures);
+	const { noLockfile, frozenLockfile } = params;
+	const featuresConfig = await generateFeaturesConfig({ ...params.common, platform, cacheFolder, noLockfile, frozenLockfile }, dstFolder, config.config, additionalFeatures);
 	if (!featuresConfig) {
 		if (canAddLabelsToContainer && !imageBuildInfo.dockerfile) {
 			return {
diff --git a/src/spec-node/devContainers.ts b/src/spec-node/devContainers.ts
@@ -68,8 +68,8 @@ export interface ProvisionOptions {
 		installCommand?: string;
 		targetPath?: string;
 	};
-	experimentalLockfile?: boolean;
-	experimentalFrozenLockfile?: boolean;
+	noLockfile?: boolean;
+	frozenLockfile?: boolean;
 	secretsP?: Promise<Record<string, string>>;
 	omitSyntaxDirective?: boolean;
 	includeConfig?: boolean;
@@ -103,7 +103,7 @@ export async function launch(options: ProvisionOptions, providedIdLabels: string
 }
 
 export async function createDockerParams(options: ProvisionOptions, disposables: (() => Promise<unknown> | undefined)[]): Promise<DockerResolverParameters> {
-	const { persistedFolder, additionalMounts, updateRemoteUserUIDDefault, containerDataFolder, containerSystemDataFolder, workspaceMountConsistency, gpuAvailability, mountWorkspaceGitRoot, mountGitWorktreeCommonDir, remoteEnv, experimentalLockfile, experimentalFrozenLockfile, omitLoggerHeader, secretsP } = options;
+	const { persistedFolder, additionalMounts, updateRemoteUserUIDDefault, containerDataFolder, containerSystemDataFolder, workspaceMountConsistency, gpuAvailability, mountWorkspaceGitRoot, mountGitWorktreeCommonDir, remoteEnv, noLockfile, frozenLockfile, omitLoggerHeader, secretsP } = options;
 	let parsedAuthority: DevContainerAuthority | undefined;
 	if (options.workspaceFolder) {
 		parsedAuthority = { hostPath: options.workspaceFolder } as DevContainerAuthority;
@@ -246,8 +246,8 @@ export async function createDockerParams(options: ProvisionOptions, disposables:
 		buildKitVersion,
 		dockerEngineVersion: dockerEngineVer,
 		isTTY: process.stdout.isTTY || options.logFormat === 'json',
-		experimentalLockfile,
-		experimentalFrozenLockfile,
+		noLockfile,
+		frozenLockfile,
 		buildxPlatform: common.buildxPlatform,
 		buildxPush: common.buildxPush,
 		additionalLabels: options.additionalLabels,
diff --git a/src/spec-node/devContainersSpecCLI.ts b/src/spec-node/devContainersSpecCLI.ts
@@ -140,6 +140,8 @@ function provisionOptions(y: Argv) {
 		'secrets-file': { type: 'string', description: 'Path to a json file containing secret environment variables as key-value pairs.' },
 		'experimental-lockfile': { type: 'boolean', default: false, hidden: true, description: 'Write lockfile' },
 		'experimental-frozen-lockfile': { type: 'boolean', default: false, hidden: true, description: 'Ensure lockfile remains unchanged' },
+		'no-lockfile': { type: 'boolean', default: false, description: 'Disable lockfile generation and verification.' },
+		'frozen-lockfile': { type: 'boolean', default: false, description: 'Ensure lockfile exists and remains unchanged; fail otherwise.' },
 		'omit-syntax-directive': { type: 'boolean', default: false, hidden: true, description: 'Omit Dockerfile syntax directives' },
 		'include-configuration': { type: 'boolean', default: false, description: 'Include configuration in result.' },
 		'include-merged-configuration': { type: 'boolean', default: false, description: 'Include merged configuration in result.' },
@@ -161,6 +163,15 @@ function provisionOptions(y: Argv) {
 			if (remoteEnvs?.some(remoteEnv => !/.+=.*/.test(remoteEnv))) {
 				throw new Error('Unmatched argument format: remote-env must match <name>=<value>');
 			}
+			if (argv['no-lockfile'] && argv['frozen-lockfile']) {
+				throw new Error('--no-lockfile and --frozen-lockfile are mutually exclusive.');
+			}
+			if (argv['no-lockfile'] && argv['experimental-frozen-lockfile']) {
+				throw new Error('--no-lockfile and --experimental-frozen-lockfile are mutually exclusive.');
+			}
+			if (argv['no-lockfile'] && argv['experimental-lockfile']) {
+				throw new Error('--no-lockfile and --experimental-lockfile are mutually exclusive.');
+			}
 			return true;
 		});
 }
@@ -213,11 +224,16 @@ async function provision({
 	'secrets-file': secretsFile,
 	'experimental-lockfile': experimentalLockfile,
 	'experimental-frozen-lockfile': experimentalFrozenLockfile,
+	'no-lockfile': noLockfile,
+	'frozen-lockfile': frozenLockfile,
 	'omit-syntax-directive': omitSyntaxDirective,
 	'include-configuration': includeConfig,
 	'include-merged-configuration': includeMergedConfig,
 }: ProvisionArgs) {
 
+	warnDeprecatedLockfileFlags(experimentalLockfile, experimentalFrozenLockfile);
+	const effectiveFrozenLockfile = frozenLockfile || experimentalFrozenLockfile;
+
 	const workspaceFolder = workspaceFolderArg ? path.resolve(process.cwd(), workspaceFolderArg) : undefined;
 	const addRemoteEnvs = addRemoteEnv ? (Array.isArray(addRemoteEnv) ? addRemoteEnv as string[] : [addRemoteEnv]) : [];
 	const addCacheFroms = addCacheFrom ? (Array.isArray(addCacheFrom) ? addCacheFrom as string[] : [addCacheFrom]) : [];
@@ -282,8 +298,8 @@ async function provision({
 		containerSessionDataFolder,
 		skipPersistingCustomizationsFromFeatures: false,
 		omitConfigRemotEnvFromMetadata,
-		experimentalLockfile,
-		experimentalFrozenLockfile,
+		noLockfile,
+		frozenLockfile: effectiveFrozenLockfile,
 		omitSyntaxDirective,
 		includeConfig,
 		includeMergedConfig,
@@ -527,8 +543,22 @@ function buildOptions(y: Argv) {
 		'skip-persisting-customizations-from-features': { type: 'boolean', default: false, hidden: true, description: 'Do not save customizations from referenced Features as image metadata' },
 		'experimental-lockfile': { type: 'boolean', default: false, hidden: true, description: 'Write lockfile' },
 		'experimental-frozen-lockfile': { type: 'boolean', default: false, hidden: true, description: 'Ensure lockfile remains unchanged' },
+		'no-lockfile': { type: 'boolean', default: false, description: 'Disable lockfile generation and verification.' },
+		'frozen-lockfile': { type: 'boolean', default: false, description: 'Ensure lockfile exists and remains unchanged; fail otherwise.' },
 		'omit-syntax-directive': { type: 'boolean', default: false, hidden: true, description: 'Omit Dockerfile syntax directives' },
-	});
+	})
+		.check(argv => {
+			if (argv['no-lockfile'] && argv['frozen-lockfile']) {
+				throw new Error('--no-lockfile and --frozen-lockfile are mutually exclusive.');
+			}
+			if (argv['no-lockfile'] && argv['experimental-frozen-lockfile']) {
+				throw new Error('--no-lockfile and --experimental-frozen-lockfile are mutually exclusive.');
+			}
+			if (argv['no-lockfile'] && argv['experimental-lockfile']) {
+				throw new Error('--no-lockfile and --experimental-lockfile are mutually exclusive.');
+			}
+			return true;
+		});
 }
 
 type BuildArgs = UnpackArgv<ReturnType<typeof buildOptions>>;
@@ -569,8 +599,13 @@ async function doBuild({
 	'skip-persisting-customizations-from-features': skipPersistingCustomizationsFromFeatures,
 	'experimental-lockfile': experimentalLockfile,
 	'experimental-frozen-lockfile': experimentalFrozenLockfile,
+	'no-lockfile': noLockfile,
+	'frozen-lockfile': frozenLockfile,
 	'omit-syntax-directive': omitSyntaxDirective,
 }: BuildArgs) {
+	warnDeprecatedLockfileFlags(experimentalLockfile, experimentalFrozenLockfile);
+	const effectiveFrozenLockfile = frozenLockfile || experimentalFrozenLockfile;
+
 	const disposables: (() => Promise<unknown> | undefined)[] = [];
 	const dispose = async () => {
 		await Promise.all(disposables.map(d => d()));
@@ -617,8 +652,8 @@ async function doBuild({
 			skipPostAttach: true,
 			skipPersistingCustomizationsFromFeatures: skipPersistingCustomizationsFromFeatures,
 			dotfiles: {},
-			experimentalLockfile,
-			experimentalFrozenLockfile,
+			noLockfile,
+			frozenLockfile: effectiveFrozenLockfile,
 			omitSyntaxDirective,
 		}, disposables);
 
@@ -1442,3 +1477,12 @@ async function readSecretsFromFile(params: { output?: Log; secretsFile?: string;
 		});
 	}
 }
+
+function warnDeprecatedLockfileFlags(experimentalLockfile: boolean, experimentalFrozenLockfile: boolean) {
+	if (experimentalLockfile) {
+		process.stderr.write('Warning: --experimental-lockfile is deprecated. Lockfiles are now enabled by default.\n');
+	}
+	if (experimentalFrozenLockfile) {
+		process.stderr.write('Warning: --experimental-frozen-lockfile is deprecated. Use --frozen-lockfile instead.\n');
+	}
+}
diff --git a/src/spec-node/featureUtils.ts b/src/spec-node/featureUtils.ts
@@ -9,5 +9,5 @@ export async function readFeaturesConfig(params: DockerCLIParameters, pkg: Packa
 	const { cwd, env, platform } = cliHost;
 	const featuresTmpFolder = await createFeaturesTempFolder({ cliHost, package: pkg });
 	const cacheFolder = await getCacheFolder(cliHost);
-	return generateFeaturesConfig({ extensionPath, cacheFolder, cwd, output, env, skipFeatureAutoMapping, platform }, featuresTmpFolder, config, additionalFeatures);
+	return generateFeaturesConfig({ extensionPath, cacheFolder, cwd, output, env, skipFeatureAutoMapping, platform, noLockfile: true }, featuresTmpFolder, config, additionalFeatures);
 }
diff --git a/src/spec-node/upgradeCommand.ts b/src/spec-node/upgradeCommand.ts
@@ -138,7 +138,7 @@ async function featuresUpgrade({
 		const lockfilePath = getLockfilePath(config);
 		await writeLocalFile(lockfilePath, '');
 		// Update lockfile
-		await writeLockfile(params, config, lockfile, true);
+		await writeLockfile(params, config, lockfile);
 	} catch (err) {
 		if (output) {
 			output.write(err && (err.stack || err.message) || String(err));
diff --git a/src/spec-node/utils.ts b/src/spec-node/utils.ts
@@ -127,8 +127,8 @@ export interface DockerResolverParameters {
 	buildKitVersion: { versionString: string; versionMatch?: string } | undefined;
 	dockerEngineVersion: { versionString: string; versionMatch?: string } | undefined;
 	isTTY: boolean;
-	experimentalLockfile?: boolean;
-	experimentalFrozenLockfile?: boolean;
+	noLockfile?: boolean;
+	frozenLockfile?: boolean;
 	buildxPlatform: string | undefined;
 	buildxPush: boolean;
 	additionalLabels: string[];
diff --git a/src/test/configs/.gitignore b/src/test/configs/.gitignore
@@ -0,0 +1,6 @@
+# Lock files will be generated during test runs. Ignore them from git because
+# they can point to different hashes when the feature is updated.
+# To add a lock file when it is required for a test, add it to git with the command:
+#     git add --force devcontainer-lock.json
+devcontainer-lock.json
+.devcontainer-lock.json
diff --git a/src/test/container-features/configs/.gitignore b/src/test/container-features/configs/.gitignore
@@ -0,0 +1,6 @@
+# Lock files will be generated during test runs. Ignore them from git because
+# they can point to different hashes when the feature is updated.
+# To add a lock file when it is required for a test, add it to git with the command:
+#     git add --force devcontainer-lock.json
+devcontainer-lock.json
+.devcontainer-lock.json
diff --git a/src/test/container-features/configs/lockfile-no-lockfile/.devcontainer.json b/src/test/container-features/configs/lockfile-no-lockfile/.devcontainer.json
@@ -0,0 +1,7 @@
+{
+	"image": "mcr.microsoft.com/devcontainers/base:ubuntu",
+	"features": {
+		"ghcr.io/codspace/features/flower:1.0.0": {},
+		"ghcr.io/codspace/features/color:1.0.4": {}
+	}
+}
diff --git a/src/test/container-features/generateFeaturesConfig.test.ts b/src/test/container-features/generateFeaturesConfig.test.ts
@@ -21,7 +21,7 @@ describe('validate generateFeaturesConfig()', function () {
     const env = { 'SOME_KEY': 'SOME_VAL' };
     const platform = process.platform;
 	const cacheFolder = path.join(os.tmpdir(), `devcontainercli-test-${crypto.randomUUID()}`);
-    const params = { extensionPath: '', cwd: '', output, env, cacheFolder, persistedFolder: '', skipFeatureAutoMapping: false, platform };
+    const params = { extensionPath: '', cwd: '', output, env, cacheFolder, persistedFolder: '', skipFeatureAutoMapping: false, platform, noLockfile: true };
 
     it('should correctly return a featuresConfig with v2 local features', async function () {
         const version = 'unittest';
diff --git a/src/test/container-features/lockfile.test.ts b/src/test/container-features/lockfile.test.ts
diff --git a/yarn.lock b/yarn.lock

Original file line number	Diff line number	Diff line change
`@@ -6,4 +6,4 @@`
`6`	`6`	`"integrity": "sha256:ce078b7bf7d9ef3bcb9813b32103795d8d72172446890b64772cbe1dec6baafd"`
`7`	`7`	`}`
`8`	`8`	`}`
`9`		`-}`
	`9`	`+}`
Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@devcontainers/cli",`
`3`	`3`	`"description": "Dev Containers CLI",`
`4`		`- "version": "0.86.1",`
	`4`	`+ "version": "0.87.0",`
`5`	`5`	`"bin": {`
`6`	`6`	`"devcontainer": "devcontainer.js"`
`7`	`7`	`},`
Original file line number	Diff line number	Diff line change
`@@ -45,7 +45,11 @@ export async function generateLockfile(featuresConfig: FeaturesConfig, config?:`
`45`	`45`	`});`
`46`	`46`	`}`
`47`	`47`
`48`		`-export async function writeLockfile(params: ContainerFeatureInternalParams, config: DevContainerConfig, lockfile: Lockfile, forceInitLockfile?: boolean): Promise<string \| undefined> {`
	`48`	`+export async function writeLockfile(params: ContainerFeatureInternalParams, config: DevContainerConfig, lockfile: Lockfile): Promise<string \| undefined> {`
	`49`	`+ if (params.noLockfile) {`
	`50`	`+ return;`
	`51`	`+ }`
	`52`	`+`
`49`	`53`	`const lockfilePath = getLockfilePath(config);`
`50`	`54`	`const oldLockfileContent = await readLocalFile(lockfilePath)`
`51`	`55`	`.catch(err => {`
`@@ -54,14 +58,10 @@ export async function writeLockfile(params: ContainerFeatureInternalParams, conf`
`54`	`58`	`}`
`55`	`59`	`});`
`56`	`60`
`57`		`- if (!forceInitLockfile && !oldLockfileContent && !params.experimentalLockfile && !params.experimentalFrozenLockfile) {`
`58`		`- return;`
`59`		`- }`
`60`		`-`
`61`	`61`	`// Trailing newline per POSIX convention`
`62`	`62`	`const newLockfileContentString = JSON.stringify(lockfile, null, 2) + '\n';`
`63`	`63`	`const newLockfileContent = Buffer.from(newLockfileContentString);`
`64`		`- if (params.experimentalFrozenLockfile && !oldLockfileContent) {`
	`64`	`+ if (params.frozenLockfile && !oldLockfileContent) {`
`65`	`65`	`throw new Error('Lockfile does not exist.');`
`66`	`66`	`}`
`67`	`67`	`// Normalize the existing lockfile through JSON.parse -> JSON.stringify to produce`
`@@ -76,7 +76,7 @@ export async function writeLockfile(params: ContainerFeatureInternalParams, conf`
`76`	`76`	`}`
`77`	`77`	`}`
`78`	`78`	`if (!oldLockfileNormalized \|\| oldLockfileNormalized !== newLockfileContentString) {`
`79`		`- if (params.experimentalFrozenLockfile) {`
	`79`	`+ if (params.frozenLockfile) {`
`80`	`80`	`throw new Error('Lockfile does not match.');`
`81`	`81`	`}`
`82`	`82`	`await writeLocalFile(lockfilePath, newLockfileContent);`