#18511 Expand `generate-lockfiles --diff` to report when VCS deps change Issue created by cognifloyd Is your feature request related to a problem? Please describe. When a VCS dep uses a branch name (like `st2-rbac-backend @ git+https://github.com/StackStorm/st2-rbac-backend.git@master`), and that branch gets new commits, the artifact hash changes even though the version does not. This update does not get reflected in the

generate-lockfiles --diff

output. Describe the solution you'd like Include a line in the diff output for VCS deps when the hash changes, even though the version stays the same. Describe alternatives you've considered Manually review the git diff when committing the lockfile (well, I do this anyway - the

--diff

summarized output is just so much nicer!) Additional context Here is the lockfile's diff for a recent update to the st2-rbac-backend repo where nothing but the hash changed:

{
           "artifacts": [
             {
               "algorithm": "sha256",
-              "hash": "3b40f91ab4d13271cb1049423b54f103710ded6c8469cac3e39c63ad8b3ece09",
+              "hash": "9141e9e388ab036f9c6ecc055666e900de86f0e30ac818ca37af86d8cb6fb309",
               "url": "git+<https://github.com/StackStorm/st2-rbac-backend.git@master>"
             }
           ],
           "project_name": "st2-rbac-backend",
           "requires_dists": [],
           "requires_python": null,
           "version": "3.9.dev0"
         },

pantsbuild/pants