update composer.lock path