Ignoring composer.lock is bad...
Deps updated