composer.lock unchanged; vendorHash moves anyway because the vendor FOD embeds the root package version (vendor/composer/installed.*).
composer.lock unchanged; vendorHash moves anyway because the vendor FOD embeds the root package version (vendor/composer/installed.*).