Dependency Management in a Lock File

Most of the languages that i've gotten to work in recently have some concept of dependency management in a lock file so that you can get these reproducible bills. And what about dependency management? So suppose one of my features, something thats used to live in a feature flag now already integrated it. It needs a new version of one of the libraries that we are depended on. Where do i manage thet does that part of this work flow as well?