Core locking and composite builds

[OdysseusLives]

Composite builds throw an error when I have locked all of my dependencies

Given that I am using Gradle core locks in the project composite
And I have locked my dependencies
When I define a composite build via settings.gradle
Then I expect my composite build to work without error

Actual behavior: I receive an error:

Could not determine the dependencies of task ':compileJava'.
> Could not resolve all task dependencies for configuration ':compileClasspath'.
   > Did not resolve 'gradle.nebula.integration:dependency-project:0.1.0' which is part of the dependency lock state

This looks to be captured in gradle/gradle/#4749

The issue is recreated in a project

[ljacomet]

That is indeed a limitation of the current implementation.

Just to be clear as to what is the expected resolution. When including a build as part of a composite:

1. the lock entry matching that project, and only that entry, should be ignored since the user clearly accepts to run with a different version.
2. the lock entry matching that project and its dependencies should be ignored since the user runs with a live project instead of a binary.

For Gradle, only 1 makes sense but 2 shows it will have limited applicability.

Would fixing 1 be enough for your usage?