fix composer.lock