Please address the comments from this code review:

## Overall Comments
- When building `all_dependencies`, consider canonicalizing the names from `locked_repository().packages` (e.g. via `canonicalize_name`) so that the membership check against `canonicalize_name(p)` is case/normalization-robust for both declared and locked dependencies.

## Individual Comments

### Comment 1
<location path="src/poetry/console/commands/update.py" line_range="76-78" />
<code_context>
+            #     pyproject where the lockfile has not caught up yet)
+            #   - locked deps in poetry.lock (covers transitive deps that
+            #     are not declared directly in pyproject.toml)
             all_dependencies = {dep.name for dep in self.poetry.package.all_requires}
+            all_dependencies |= {
+                p.name for p in self.poetry.locker.locked_repository().packages
+            }

</code_context>
<issue_to_address>
**issue (bug_risk):** Align dependency names with `canonicalize_name` to avoid mismatches for normalized package names.

`invalid_packages` uses `canonicalize_name(p)` for user input, but `all_dependencies` uses raw `dep.name` / `p.name`. If those aren’t already normalized the same way (dashes vs underscores, case), valid packages may be flagged as invalid. Consider building `all_dependencies` from `canonicalize_name(dep.name)` and `canonicalize_name(p.name)` so both sides of the comparison are normalized consistently.
</issue_to_address>