in https://github.com/frappe/frappe/pull/9382 snyk was added in package.json yet yarn.lock wasnt updated. this makes changes in yarn.lock file after a run of `bench setup requirements` which would possibly cause `bench update` to break on the next run too.version-14