Update deps
Add readme entry to lock file to explain what it is