replaced to with from
`update --lock` is useful e.g. after resolving merge conflicts when the packages should stay at their current versions but the lock file hash is invalid and must be updated.