lock file doesn't lock dependencies

[qudix]

Xmake Version

v3.0.4+dev.954944d14

Operating System Version and Architecture

Windows 11, 25H2

Describe Bug

running operations like xmake project -k vsxmake upgrades dependencies, seemingly ignoring and overwriting whatever is in the xmake-requires.lock file

Expected Behavior

download what is specified in the lock file and do not modify the lock unless specifically told to do so via xmake require --upgrade

Project Configuration

https://github.com/libxse/commonlibsf-template

Additional Information and Error Logs

[waruqi]

This is due to a refactoring of the hash.strhash32 used in requirekey in the lockfile in version 3.0.4. This will break the previous lockfile. You can delete the current requires-lock file; it should not change frequently in the future.