composer update hash