That suppose to help with Dependabot security updates not updating lockfile.
Previously version 8 was installed once it became available, breaking the pipelines and docker build.