To assist with implementing reproducible builds and simplifying the fossa Workflow we should commit the lock files except for examples. We can then have renovate update these files weekly and additionally filter the fossa Workflow to only run when the lock file changes. This reduces un-necessary uploads.