update composer.(json|lock)