[composer] update lock