It is locked when the pubspec.lock
file contains an entry for this dependency.
You can change the dependency in pubspec.lock
manually to specify exactly what version you want to use.
pub upgrade
checks for the newest version that fits your pubspec.yaml
configuration and updates your pubspec.lock file automatically.
when pubspec.lock
is checked in with your package code in a CVS repository you are able to later reproduce the exact same setup as you had when you checked in your code even when your pubspec.yaml
allowed a wider range of versions for a dependency.
see also