Forced resolution of a transitive dependency of a *patched* dependency

[elado]

I have a package I patched (e.g. "resolutions": { "foo@1.2.3": "patch:foo@npm%3A1.2.3#./<path>" }
I'd like to set a resolution for one of its transitive dependencies
normally any of these would work:

"resolutions": {
  "foo/bar": "4.5.6",
  // or this
  "foo@npm:1.2.3/bar": "4.5.6"
}

but with the patch, I can't specify "foo@npm:1.2.3/bar" because it's no longer the same package identifier, and bar remains the same old version. I have multiple versions of foo in the project so it's essential that I specify the correct version.

is there a proper syntax to point to the patched package identifier? with yarn why foo I see something like

├─ @x/pkg1@workspace:pkg1 [aecf8]
│  └─ foo@patch:foo@npm%3A1.2.3#.yarn/patches/foo-npm-1.2.3-456c7fa4bf.patch::version=1.2.3&hash=5f4be0&locator=x-monorepo%40workspace%3A. [7a108] (via patch:foo@npm:1.2.3#.yarn/patches/foo-npm-1.2.3-456c7fa4bf.patch::locator=x-monorepo%40workspace%3A. [7a108])
│
├─ @x/pkg2@workspace:pkg2 [87fbb3]
│  └─ foo@patch:foo@npm%3A4.5.6#.yarn/patches/foo-npm-4.5.6-3de42f0999.diff::version=4.5.6&hash=e376d0&locator=x-monorepo%40workspace%3A. [40639] (via patch:foo@npm:4.5.6#.yarn/patches/foo-npm-4.5.6-3de42f0999.diff::locator=x-monorepo%40workspace%3A. [40639])
│

So maybe a way to identify foo with the 7a108 hash?

I also tried patching foo/package.json with a pinned version of bar but that didn't have any effect.