[COMPOSER] update composer.lock