update composer lock.