tell gradle to lock the dependencies down?

android/app/build.gradle

@@ -288,6 +288,10 @@ dependencies {
     }
 }
 
+dependencyLocking {
+    lockAllConfigurations()
+}
+
 // Bundles the app's data for the build process
 task bundleData(type: Exec) {
     workingDir '../../'

android/build.gradle

@@ -20,6 +20,10 @@ buildscript {
         // NOTE: Do not place your application dependencies here; they belong
         // in the individual module build.gradle files
     }
+
+    configurations.classpath {
+        resolutionStrategy.activateDependencyLocking()
+    }
 }
 
 ext {

android/gradle/dependency-locks/buildscript-classpath.lockfile

@@ -0,0 +1,86 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+androidx.databinding:databinding-common:3.5.0
+androidx.databinding:databinding-compiler-common:3.5.0
+com.android.databinding:baseLibrary:3.5.0
+com.android.tools.analytics-library:crash:26.5.0
+com.android.tools.analytics-library:protos:26.5.0
+com.android.tools.analytics-library:shared:26.5.0
+com.android.tools.analytics-library:tracker:26.5.0
+com.android.tools.build.jetifier:jetifier-core:1.0.0-beta04
+com.android.tools.build.jetifier:jetifier-processor:1.0.0-beta04
+com.android.tools.build:aapt2-proto:0.4.0
+com.android.tools.build:apksig:3.5.0
+com.android.tools.build:apkzlib:3.5.0
+com.android.tools.build:builder-model:3.5.0
+com.android.tools.build:builder-test-api:3.5.0
+com.android.tools.build:builder:3.5.0
+com.android.tools.build:bundletool:0.9.0
+com.android.tools.build:gradle-api:3.5.0
+com.android.tools.build:gradle:3.5.0
+com.android.tools.build:manifest-merger:26.5.0
+com.android.tools.build:transform-api:2.0.0-deprecated-use-gradle-api
+com.android.tools.ddms:ddmlib:26.5.0
+com.android.tools.layoutlib:layoutlib-api:26.5.0
+com.android.tools.lint:lint-gradle-api:26.5.0
+com.android.tools:annotations:26.5.0
+com.android.tools:common:26.5.0
+com.android.tools:dvlib:26.5.0
+com.android.tools:repository:26.5.0
+com.android.tools:sdk-common:26.5.0
+com.android.tools:sdklib:26.5.0
+com.google.auto.value:auto-value:1.5.2
+com.google.code.findbugs:jsr305:3.0.2
+com.google.code.gson:gson:2.8.5
+com.google.errorprone:error_prone_annotations:2.3.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:27.0.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.1
+com.google.jimfs:jimfs:1.1
+com.google.protobuf:protobuf-java-util:3.4.0
+com.google.protobuf:protobuf-java:3.4.0
+com.googlecode.json-simple:json-simple:1.1
+com.googlecode.juniversalchardet:juniversalchardet:1.0.3
+com.squareup:javapoet:1.8.0
+com.squareup:javawriter:2.5.0
+com.sun.activation:javax.activation:1.2.0
+com.sun.istack:istack-commons-runtime:2.21
+com.sun.xml.fastinfoset:FastInfoset:1.2.13
+commons-codec:commons-codec:1.10
+commons-io:commons-io:2.4
+commons-logging:commons-logging:1.2
+it.unimi.dsi:fastutil:7.2.0
+javax.inject:javax.inject:1
+javax.xml.bind:jaxb-api:2.2.12-b140109.1041
+net.sf.jopt-simple:jopt-simple:4.9
+net.sf.kxml:kxml2:2.3.0
+net.sf.proguard:proguard-base:6.0.3
+net.sf.proguard:proguard-gradle:6.0.3
+org.antlr:antlr4:4.5.3
+org.apache.commons:commons-compress:1.12
+org.apache.httpcomponents:httpclient:4.5.6
+org.apache.httpcomponents:httpcore:4.4.10
+org.apache.httpcomponents:httpmime:4.5.6
+org.bouncycastle:bcpkix-jdk15on:1.56
+org.bouncycastle:bcprov-jdk15on:1.56
+org.checkerframework:checker-qual:2.5.2
+org.codehaus.mojo:animal-sniffer-annotations:1.17
+org.glassfish.jaxb:jaxb-core:2.2.11
+org.glassfish.jaxb:jaxb-runtime:2.2.11
+org.glassfish.jaxb:txw2:2.2.11
+org.jdom:jdom2:2.0.6
+org.jetbrains.kotlin:kotlin-reflect:1.3.41
+org.jetbrains.kotlin:kotlin-stdlib-common:1.3.41
+org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.3.41
+org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.3.41
+org.jetbrains.kotlin:kotlin-stdlib:1.3.41
+org.jetbrains.trove4j:trove4j:20160824
+org.jetbrains:annotations:13.0
+org.jvnet.staxex:stax-ex:1.7.7
+org.ow2.asm:asm-analysis:6.0
+org.ow2.asm:asm-commons:6.0
+org.ow2.asm:asm-tree:6.0
+org.ow2.asm:asm-util:6.0
+org.ow2.asm:asm:6.0