which wasn't updated at release time
The npm lock file was imported into yarn. A yarn install pass was then run to double-check the lock file for sanity.