Are you locking the library version on purpose? Consider "dosomething/messagebroker-phplib": ">=0.1.*" where deleting the lock file and doing an install to rebuild "vendor" will get you the latest. But I'm guessing you already know this...