Avoid invalidating the lockfile versions after an exclude newer change (#17721)
I think if you switch to a different exclude newer time we should only
change package versions if they're no longer within the range.
Otherwise, changing your exclude-newer settings can cause a bunch of
package upgrades without recourse.