update composer.lock for new alert dependency version