Composer lock update