Fwiw adding new arguments to a function should be a minor release increment (1.2.3 -> 1.3.0), so theoretically you could prevent this issue by locking the minor

Fwiw adding new arguments to a function should be a minor release increment (1.2.3 -> 1.3.0), so theoretically you could prevent this issue by locking the minor version numbers on dependencies (or you could definitely prevent it by locking your patch numbers) Practically speaking, I've virtually never run into this problem in 6 years of writing JS professionally. Of course your mileage may vary