Backport #9147 to 1.7.latest

[jtcohen6]

Resolves errors related to package-lock.yml file:

• Lock git packages to specific commit SHA revision
• Use PackageRenderer to reread

Checklist

• I have read the contributing guide and understand what's expected of me
• I have run this code in development and it appears to resolve the stated issue
• This PR includes tests, or tests are not required/relevant for this PR
• This PR has no interface changes (e.g. macros, cli, logs, json artifacts, config files, adapter interface, etc) or this PR has already received feedback and approval from Product or DX
• This PR includes type annotations for new and modified functions

[codecov]

Codecov Report

Attention: 3 lines in your changes are missing coverage. Please review.

Comparison is base (f94bf2b) 86.64% compared to head (a2b5bb7) 86.61%.

Files	Patch %	Lines
core/dbt/deps/tarball.py	85.71%	2 Missing ⚠️
core/dbt/deps/git.py	90.00%	1 Missing ⚠️

Additional details and impacted files

@@              Coverage Diff               @@
##           1.7.latest    #9156      +/-   ##
==============================================
- Coverage       86.64%   86.61%   -0.03%     
==============================================
  Files             179      179              
  Lines           26542    26572      +30     
==============================================
+ Hits            22996    23015      +19     
- Misses           3546     3557      +11     

Flag	Coverage Δ
integration	83.46% <86.95%> (-0.06%)	⬇️
unit	64.98% <78.26%> (+0.02%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.