update the composer.lock dependencies