Unexpected `deno.lock` update?

deno.lock

deno.lock

updated to add a new transitive dependency to

@deno/cache-dir

@deno/cache-dir

, when its version wasn’t touched at all?