only whitelist packages we are keeping from the lockfile

src/cargo/core/registry.rs

@@ -168,15 +168,12 @@ impl<'cfg> PackageRegistry<'cfg> {
         self.add_source(source, Kind::Override);
     }
 
-    pub fn add_to_yanked_whitelist(&mut self, iter: impl Iterator<Item = PackageId>) {
-        self.yanked_whitelist.extend(iter)
-    }
-
     pub fn register_lock(&mut self, id: PackageId, deps: Vec<PackageId>) {
         trace!("register_lock: {}", id);
         for dep in deps.iter() {
             trace!("\t-> {}", dep);
         }
+        self.yanked_whitelist.insert(id);
         let sub_map = self
             .locked
             .entry(id.source_id())

src/cargo/ops/resolve.rs

@@ -471,7 +471,6 @@ fn register_previous_locks(
     // package's dependencies here as that'll be covered below to poison those
     // if they changed.
     let mut avoid_locking = HashSet::new();
-    registry.add_to_yanked_whitelist(resolve.iter());
     for node in resolve.iter() {
         if !keep(&node) {
             add_deps(resolve, node, &mut avoid_locking);