- ensure tests rely on temporary cache directory
- remove external http call requirement for lock --no-update

Relates-to: #1645