composer.lock and composer.json update