update pub spec lock