update composer.json and lock for composer as dev