Last Open Zepplin changes on ERC721 (also upgradeable), namely removing the approval event on _transfer which took place 2 month ago are not updated on NPM.
The changes.
// Clear approvals from the previous owner
delete _tokenApprovals[tokenId];
Current code when installing dependency with Yarn/NPM
// Clear approvals from the previous owner
_approve(address(0), tokenId);