update composer.lock to reflect changes in Http's composer.json.