Inconsistency between package.json and package-lock.json?

[dartcafe]

The package versions inside package.json differ from the versions inside package-lock.json, which got updated by recent merge requests. Is this by intention or should this be fixed?

i.e. eslint-webpack-plugin
#98 vs. https://github.com/nextcloud/eslint-config/blob/dcbf6ac4614f2ca2b9fa7860b07fe0e8026cc128/package.json#L35

[skjnldsv]

^ means it will include all minors within 2.x.x, so there is no need to change it

[skjnldsv]

https://docs.npmjs.com/about-semantic-versioning

[skjnldsv]