Thanks, Ed!

You are correct: There’s a first step before my first step. Upgrading dependencies, especially major version, may introduce breaking changes. It is a recommended way to commit current package.json and package-lock.json for the baseline.

Thank you for reading my article, and for providing a prudent approach!