As a workaround, you can add a specific version of CSV for both manifests, and perhaps pin it so it is not updated accidentally.
Cf the discussion at
I could not find an open issue at CSV.jl, which would be the first step towards changing this (or allowing it to be customized).