Don't version composer.lock so always get newest dependencies