fixed git hook, composer.lock hash doesn't necessarily change on package version update, so we'll just use the file md5
updated deps