This only locks dependencies for Gradle plugins, but not for all of the runtime dependencies that we might have. That will be accomplished in a followup change.