What is the best practise with .terraform.lock.hcl in modules … commit or not?

[yasinlachiny]

Is it not better to keep .terraform.lock.hcl in our repo?
For example, it could be more secure

[acutchin-bitpusher]

Essential to keep in the repo. Until you deliberately decide to upgrade providers/versions, you want to use the same exact set in Terraform actions, regardless of where/how/when they run and who or what runs them.

[yasinlachiny]

What if we hardcode the version in the terraform-version file?

[acutchin-bitpusher]

You mean the version of every provider? I suppose that is another way to do it.