fix: regenerate package-lock.json (#1944)

Generated by `git checkout 125f1df package-lock.json && npm i`,
eb35863 somehow broke the package-lock format (presumably
because I had https://www.npmjs.com/package/npm-merge-driver
enabled locally).