What does the .terraform.lock.hcl file primarily record?

1. Every child module's variable values
2. Selected provider versions and package checksums
3. Cloud authentication secrets by design
4. Every future resource change