updated composer lock