🧹 Tech Debt
The current package references in nimble are managed with semantic version ranges but there is no lockfile used in nimble to lock dependencies to a specific version.
We should use a lockfile in the repo so our dependencies to make sure nimble builds are reproducible across local and CI.
See discussion in: #1697 (comment)