So is the issue that we have pinned the immediate versions of the tap that we are using (a local variant of tap-salesforce@v1.0.0), and the Meltano installation (Docker image meltano/meltano:v2.20), but the former is pulling down whatever is the current base for tap-salesforce, which in this case was changed unexpcectedly.
Can the variant of the tap pin itself to a particular version of the parent, to stop this happening in the future?
Also, I don't really understand lock files - would it be appropriate for them to be created automatically if not there, rather than breaking existing pipelines?