Yeah the lockfile format changed in 10.0, and it’s not yet supported by GitHub’s dependabot, so we’ve pinned core and all themes/plugins to 9.x.
In theory it’s supposed to auto-switch back to 9.x… but it seems it isn’t working for everyone 
If you do pnpm self-update 9 does that get things working again?