update composer.lock with new dependencies