BUG package-lock.json version does not get bumped at second position

[alexanderniebuhr]

we do have a vscode extension, which adds itself as a package in package-lock.json - but it just bumps the version in line 3, but not in line 8, which is reference to own package. After npm install this version gets changed too..

{
  "name": "generic-vscode-extension",
  "version": "0.1.0", // this gets bumped
  "lockfileVersion": 2,
  "requires": true,
  "packages": {
    "": {
      "version": "0.0.9", // this is just updated after running npm install, so not working
      "license": "MIT",
      "devDependencies": {
        ...
      }
    },
    ...
  }
}