Latest vendor updates in composer.lock