Bump lock@6.3.6