chore: lockfile maintenance and ensures there's only one graphql instance

Seems somewhere in the dependency chain there's code using `instanceof`
operator.

Author: haoqunjiang