composer.lock now has appropriate version for zendframework