versioning composer.lock file