Looking at the moment-timezone on github, looks like you are totally right.
I think this will require some further testing on our end to check why we wasn’t able to reproduce with the current setup we use, if moment is really still required as a full dependency (But your tests seems to show it isn’t), and since I’m now able to reproduce, no issue for me to take this from now on.
Great news! I mean, I might open a PR simply to have it point to it in my project’s package.json. I might even simply have it point to my fork so as not to clutter the PR section. In any case, I’ll keep an eye on Forest’s repo for when the fix is live and simply switch it back. We are going into production this week, so it’s something my team needs asap.