update composer.lock file