remove composer.lock as every sandbox
pull remote update on check vendors script
plug migrations as agreed