If you add a new dep it can fail due to conflicts with already locked versions of other deps.

I don't know how effective this might be, but I think we could do this:

• When we have a version conflict
• and some of the packages in the conflict chain are locked
• offer to unlock those packages and try again

If we are on CI (we can look for CI related environment variables) do not offer this functionality.