Our only patched dependency spells its version in four places by hand, and the install checks three of them

A 221-line pnpm patch that adds tap to focus to expo-camera, the ERR_PNPM_UNUSED_PATCH that makes an upgrade impossible to miss, and the one copy of the version number that nothing verifies: a sentence in a comment, which spent an upgrade pointing at a file that no longer exists.