Block a user
chore: mark vendor directory as generated
WIP: Recipe: support digest pinning at upgrade-time
Building
@Brooke LGTM overall - do you think there is an easy fix to the the registry push issues? If not, I'm fine merging this while we figure that out.