Lock down component versions

[BDA]

Currently I am using a Workspace project with version 1.8 of the NCS.  Does this lockdown all versions of libraries/components that the project is built with?  If I pull this project out of source control a year from now, is it going to look on the internet for any dependencies?  I need to ensure that my project builds the same exact way every time, no matter what development machine it's on.

[Sigurd Hellesvik]

Hi

The nRF Connect SDK use the West tool to manage the different repositories used.

See This guide and this documentation on West init and update.

See https://github.com/nrfconnect/sdk-nrf/blob/main/west.yml for a list of other repos used for this project.
(Keep in mind that this also will include the zephyr-sdk/west.yml)

If I pull this project out of source control a year from now, is it going to look on the internet for any dependencies? 

If you want to see what happens when you set up the nRF Connect SDK, I recommend trying to  Install Manually instead of using the Toolchain Manager once.
Downloading from the internet happens in most of the steps here.

Does this answer your questions?

Regards,
Sigurd Hellesvik