Lockfile builds are also deterministic. You only break that determinism if you change the lockfile.