It's possible I'm misunderstanding how the VCS dependency gets included. I was running

./pants export ::

with and without a VCS dependency in my

requirements.txt

(and implicitly the lockfile), but maybe it still got included?