The upcoming patch release of hapi v16 will remove the npm shrinkwrap file. The file locked down the versions of core dependencies. However, since the v16 branch rarely updates, it fails to allow newer versions of dependencies. Use your own lock file instead.