Update composer deps and lock