diff --git a/.gitignore b/.gitignore
index 8b977bc..bf0914c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
 # Deno
 .deno/
-deno.lock
+# deno.lock should be committed for reproducible builds
 
 # Node
 node_modules/
diff --git a/changelog.md b/changelog.md
index 772b146..b59cd05 100644
--- a/changelog.md
+++ b/changelog.md
@@ -1,5 +1,14 @@
 # Changelog
 
+## 2025-10-24 - 1.2.3 - fix(deps)
+Update Deno dependencies and configuration, commit lockfile, and adjust plugins exports
+
+- Add deno.lock with pinned std library versions for reproducible Deno builds
+- Remove deno.lock from .gitignore so the lockfile is committed
+- Remove unused @std/fmt export from ts/plugins.ts and from deno.json imports
+- Adjust deno.json compiler options (remove allowJs)
+- Add local .claude/settings.local.json (local permissions/config)
+
 ## 2025-10-24 - 1.2.2 - fix(logging)
 Refactor logging and plugin imports: remove push.rocks dependencies and provide a simple console-based logger with a compatibility shim
 
diff --git a/deno.json b/deno.json
index a05dfb1..cf355dc 100644
--- a/deno.json
+++ b/deno.json
@@ -18,7 +18,6 @@
     "@std/fs": "jsr:@std/fs@^1.0.0",
     "@std/yaml": "jsr:@std/yaml@^1.0.0",
     "@std/assert": "jsr:@std/assert@^1.0.0",
-    "@std/fmt": "jsr:@std/fmt@^1.0.0",
     "@std/cli": "jsr:@std/cli@^1.0.0"
   },
   "nodeModulesDir": "auto",
@@ -26,8 +25,7 @@
     "lib": [
       "deno.window"
     ],
-    "strict": true,
-    "allowJs": false
+    "strict": true
   },
   "fmt": {
     "useTabs": false,
diff --git a/deno.lock b/deno.lock
new file mode 100644
index 0000000..49aef82
--- /dev/null
+++ b/deno.lock
@@ -0,0 +1,70 @@
+{
+  "version": "5",
+  "specifiers": {
+    "jsr:@std/assert@1": "1.0.15",
+    "jsr:@std/cli@1": "1.0.23",
+    "jsr:@std/fs@1": "1.0.19",
+    "jsr:@std/internal@^1.0.10": "1.0.12",
+    "jsr:@std/internal@^1.0.12": "1.0.12",
+    "jsr:@std/internal@^1.0.9": "1.0.12",
+    "jsr:@std/path@1": "1.1.2",
+    "jsr:@std/path@^1.1.1": "1.1.2",
+    "jsr:@std/yaml@1": "1.0.10",
+    "npm:@types/node@*": "24.2.0"
+  },
+  "jsr": {
+    "@std/assert@1.0.15": {
+      "integrity": "d64018e951dbdfab9777335ecdb000c0b4e3df036984083be219ce5941e4703b",
+      "dependencies": [
+        "jsr:@std/internal@^1.0.12"
+      ]
+    },
+    "@std/cli@1.0.23": {
+      "integrity": "bf95b7a9425ba2af1ae5a6359daf58c508f2decf711a76ed2993cd352498ccca",
+      "dependencies": [
+        "jsr:@std/internal@^1.0.12"
+      ]
+    },
+    "@std/fs@1.0.19": {
+      "integrity": "051968c2b1eae4d2ea9f79a08a3845740ef6af10356aff43d3e2ef11ed09fb06",
+      "dependencies": [
+        "jsr:@std/internal@^1.0.9",
+        "jsr:@std/path@^1.1.1"
+      ]
+    },
+    "@std/internal@1.0.12": {
+      "integrity": "972a634fd5bc34b242024402972cd5143eac68d8dffaca5eaa4dba30ce17b027"
+    },
+    "@std/path@1.1.2": {
+      "integrity": "c0b13b97dfe06546d5e16bf3966b1cadf92e1cc83e56ba5476ad8b498d9e3038",
+      "dependencies": [
+        "jsr:@std/internal@^1.0.10"
+      ]
+    },
+    "@std/yaml@1.0.10": {
+      "integrity": "245706ea3511cc50c8c6d00339c23ea2ffa27bd2c7ea5445338f8feff31fa58e"
+    }
+  },
+  "npm": {
+    "@types/node@24.2.0": {
+      "integrity": "sha512-3xyG3pMCq3oYCNg7/ZP+E1ooTaGB4cG8JWRsqqOYQdbWNY4zbaV0Ennrd7stjiJEFZCaybcIgpTjJWHRfBSIDw==",
+      "dependencies": [
+        "undici-types"
+      ],
+      "tarball": "https://verdaccio.lossless.digital/@types/node/-/node-24.2.0.tgz"
+    },
+    "undici-types@7.10.0": {
+      "integrity": "sha512-t5Fy/nfn+14LuOc2KNYg75vZqClpAiqscVvMygNnlsHBFpSXdJaYtXMcdNLpl/Qvc3P2cB3s6lOV51nqsFq4ag==",
+      "tarball": "https://verdaccio.lossless.digital/undici-types/-/undici-types-7.10.0.tgz"
+    }
+  },
+  "workspace": {
+    "dependencies": [
+      "jsr:@std/assert@1",
+      "jsr:@std/cli@1",
+      "jsr:@std/fs@1",
+      "jsr:@std/path@1",
+      "jsr:@std/yaml@1"
+    ]
+  }
+}
diff --git a/ts/00_commitinfo_data.ts b/ts/00_commitinfo_data.ts
index f8dc2e3..b5486e5 100644
--- a/ts/00_commitinfo_data.ts
+++ b/ts/00_commitinfo_data.ts
@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/isocreator',
-  version: '1.2.2',
+  version: '1.2.3',
   description: 'Ubuntu ISO customization tool for PC and Raspberry Pi with WiFi and cloud-init configuration'
 }
diff --git a/ts/plugins.ts b/ts/plugins.ts
index 935ad04..f6e4a4c 100644
--- a/ts/plugins.ts
+++ b/ts/plugins.ts
@@ -8,5 +8,4 @@ export * as path from '@std/path';
 export * as fs from '@std/fs';
 export * as yaml from '@std/yaml';
 export * as assert from '@std/assert';
-export * as fmt from '@std/fmt';
 export * as cli from '@std/cli';