The composer.lock should be shipped in order to ensure correct
versions of dependencies on source checkouts.
Additionally it ensures that the tests are based on the same
versions (of all recursive dependencies).

More details are added to the forge ticket.

Resolves: #59515
Releases: master
Change-Id: Id4d0d5a34a6cce1315089239593143fcdc25e274
Reviewed-on: http://review.typo3.org/39971


Reviewed-by: Helmut Hummel <helmut.hummel@typo3.org>
Tested-by: Helmut Hummel <helmut.hummel@typo3.org>