updating composer.lock