The starter app no longer ships a lock file, as laravel/laravel doesn't:
composer create-project resolves the newest versions its ^ constraints
allow, so a new site gets the latest cms and admin themes without the
starter app having to be released for each of them. The site's own
composer.lock is made on its first install, for it to commit.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>