EnabledSourceHandler's query result caching should also consider the contents of composer.lock

The code looks good. We'll need to test it once ✨ Feature: Include option in drupalorg_jsonapi source to show only locally installed modules Active is merged.

Jobs are failing in the CI, but I'm not sure if it's related to this.

I ended up having to de-flakify some tests because for some reason, the ordering of projects changes under certain circumstances. Why, I can't say, but I definitely confirmed two things:

• The tests I changed do not actually care about order; they were just relying on order-sensitive selectors because they didn't know any better.
• The EnabledSourceHandler is storing the same exact set of results, before and after this change, and returning them to the frontend. Svelte's rendering them in a different order, for some reason.

Given that, I decided that the correct course of action here is to improve the tests and make them more accurate, rather than trying to find out exactly why the ordering is different. If the ordering mattered to these particular tests, then the tests should, like, test that.

Setting to Needs work as there is a merge conflict.

Reviewed this, and even went down a rabbit hole of the safety of hash_file(), but we're fine because of the file_exists() check (and because the only other error condition is if the file being hashed is over 2GB, and if your composer.lock is over 2GB, you are beyond help)

feels good to me; I reviewed & so did Tim.

Automatically closed - issue fixed for 2 weeks with no activity.