add missing dependency to file-loader, update composer.lock