update new composer.lock