Update whoosh to locked version in download cache