Skip updates to same reference-locked version, fixes #2487, fixes #1333
added tests for not updating packages referenced by specific commit hash