WIP

src/main/java/com/google/devtools/build/lib/bazel/bzlmod/BazelModuleResolutionFunction.java

@@ -158,6 +158,12 @@ private static Selection.Result discoverAndSelect(
     var yankedVersionsKeys =
         resolvedDepGraph.values().stream()
             .filter(m -> m.getRegistry() != null)
+            // Since RepoSpecs are fetched only after yanked version checking, any module version
+            // that already has its source.json recorded in the lock file passed yanked version
+            // validation in a previous build. Since yanked version information is inherently
+            // mutable, it might have changed since then, but we choose to recheck only those module
+            // versions that have not been selected before.
+                .filter(m -> m.getRegistry().hasRepoSpec())
             .map(m -> YankedVersionsValue.Key.create(m.getName(), m.getRegistry().getUrl()))
             .collect(toImmutableSet());
     SkyframeLookupResult yankedVersionsResult = env.getValuesAndExceptions(yankedVersionsKeys);