diff --git a/lib/manager/terraform/lockfile/hash.spec.ts b/lib/manager/terraform/lockfile/hash.spec.ts
index a7ef4e736064637a88d4c16299bd8314fe638208..cae12b4be46bf94cebc7309327546eaef8d63112 100644
--- a/lib/manager/terraform/lockfile/hash.spec.ts
+++ b/lib/manager/terraform/lockfile/hash.spec.ts
@@ -20,14 +20,12 @@ const log = logger.logger as jest.Mocked<Logger>;
 describe(getName(), () => {
   let cacheDir: DirectoryResult;
 
-  beforeAll(async () => {
+  beforeEach(async () => {
     cacheDir = await dir({ unsafeCleanup: true });
     setAdminConfig({ cacheDir: cacheDir.path });
   });
 
-  beforeEach(() => jest.resetAllMocks());
-
-  afterAll(() => cacheDir.cleanup());
+  afterEach(() => cacheDir.cleanup());
 
   it('returns null if getBuilds returns null', async () => {
     httpMock
diff --git a/lib/manager/terraform/lockfile/hash.ts b/lib/manager/terraform/lockfile/hash.ts
index fe39aaedaf6f301e346f9a9d298c200e3a45de54..4862d444dab07596b40d26d625829450239fc005 100644
--- a/lib/manager/terraform/lockfile/hash.ts
+++ b/lib/manager/terraform/lockfile/hash.ts
@@ -27,9 +27,7 @@ export class TerraformProviderHash {
       // a sha256sum displayed as lowercase hex string to root hash
       const fileBuffer = await fs.readFile(file);
       hash.update(fileBuffer);
-      hash.end();
-      const data = hash.read();
-      rootHash.update(data.toString('hex'));
+      rootHash.update(hash.digest('hex'));
 
       // add double space, the filename and a new line char
       rootHash.update('  ');
@@ -38,10 +36,7 @@ export class TerraformProviderHash {
       rootHash.update('\n');
     }
 
-    rootHash.end();
-    const rootData = rootHash.read();
-    const result: string = rootData.toString('base64');
-    return result;
+    return rootHash.digest('base64');
   }
 
   static async hashOfZipContent(