composer.lock updated