"circular dependency" if building local recipes and trusted cookbook has newer version of recipe

[val-ms]

if a trusted cookbook (e.g. upstream clamav cookbook) has a newer version of a recipe than is found in the local directory, mussels may think there is a circular dependency because it tries to use both versions of the recipe

I observed this when the clamav cookbook had libcurl v8.0.1, while my local copy was still at 7.87.0:

{
    NVC(name='libcurl', version='7.87.0', cookbook='local'): {
        NVC(name='libnghttp2', version='1.52.0', cookbook='clamav')
    }, 
    NVC(name='clamav_deps', version='1.0', cookbook='local'): {
        NVC(name='libcurl', version='8.0.1', cookbook='clamav')
    }
}