manual update of the composer lock file