update version requirements, add composer.lock file