Lock file isn't updated when a dependency can't be resolved

[davidfowl]

The problem with not writing the lock file is that all dependencies turn look unresolved since the lock file provider isn't used if the lock file out of date. This makes it harder to figure out what dependency is actually missing since it makes it seems like all are missing.