update bundle.lock