update to composer lock file