The rebar.lock contains the last known working state of all dependencies with exact version numbers. rebar.config only holds the minimal dependencies (package x version >=2.0.0) Related: SYS#6006 Change-Id: I40660b23cee04ef2b4afbca34522a42a4b057e2e