Yarn 3 pnpm: Dependabot not updating lockfile in monorepo

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Package ecosystem

Yarn

### Package manager version

3.6.4

### Language version

Node.js 18

### Manifest location and content before the Dependabot update

https://github.com/imballinst/oas-typescript/blob/main/packages/oas-swagger-ui/package.json

### dependabot.yml content

-

### Updated dependency

`vite` from "4.5.2" to "4.5.3"

### What you expected to see, versus what you actually saw

Expected the `yarn.lock` to be also updated. However, in this PR https://github.com/imballinst/oas-typescript/pull/146/files, only `packages/oas-swagger-ui/package.json` is updated.

### Native package manager behavior

The `yarn.lock` gets updated as well when I do `yarn workspace oas-swagger-ui add -D --exact vite@4.5.3`.

### Images of the diff or a link to the PR, issue, or logs

https://github.com/imballinst/oas-typescript/pull/146/files

### Smallest manifest that reproduces the issue

https://github.com/imballinst/test-dependabot-not-updating-yarn/pull/2

Maybe similar like other issues, not sure if it's related or not: https://github.com/dependabot/dependabot-core/issues/8186.

Start with the linked minimal reproduction and its package.json, then compare the Dependabot PR with the native `yarn workspace oas-swagger-ui add -D --exact vite@4.5.3` behavior. Trace the Yarn 3 update path to determine why package.json changes without yarn.lock, and verify the fix against the reproduction and the linked PR diff.

Written by the indexing model from the issue text.