Updates composer.lock