Extensions: lock the repositories before overwriting their manifests