Sort dependencies in the output

[g2p]

At the moment, the order isn't stable, so updating the original file makes changes to the lockfile that can't be traced at a glance in git log -p.