For those using npm 5, package-lock.json is added in the project, which also contains a version property.

Whenever publishing an extension, the version should be bumped in package.json and package-lock.json to keep them in sync.