Fix key invalidation for workspaced dependencies

Jürg Billeterrequested to merge
juerg/workspaced-dependencies-1.2 into bst-1.2

Backport of !740 (merged) and !741 (merged).

Closes #461 (closed).

Merge request reports