Update composer.json and lock