fix composer.lock not being up to date