The release script currently updates the package.json file manually which leaves package-lock.json with the old version. Switch the release script to use npm version, it's probably easiest to use the preversion, postversion, and version hooks it provides rather than doing things manually in the release script anyway.