By catch on
Change record status: 
Published (View all published change records)
Project: 
Drupal core
Introduced in branch: 
9.5.x
Introduced in version: 
9.5.0
Issue links: 
https://www.drupal.org/node/3308369
Description: 

yarn.lock and package.json are now blocked by default .htaccess and web.config. Sites should update any modified copies of these files to incorporate the change.

Impacts: 
Site builders, administrators, editors