Updating indirect dependency modifying my own package.json?

[miqdadfwz]

Sorry if this is like a newbie question 🙏🏼

I try running pnpm up caniuse-lite in my repository, while caniuse-lite is not my direct dependency maybe it is somewhere else in my dependency tree. It seems it updates not only in lockfile (which is expected), but majority package versions in my own package.json is also modified, I'm also not sure the modified package has a direct dependency to caniuse-lite but if it does it is totally make sense for me.

So is this the expected behavior I get when running pnpm up <pkg> to an indirect dependency?