We only have OAuth enabled through the plugin. So we have the site setting enable_local_logins: false
When I set this back to true, the pending invites appear.
This makes sense to me now. How could Discourse invite people if its own local logins are disabled?
The bug is that the Invite Users button should be hidden if enable_local_logins: false.