lockfile bump; updated composer in build env to fix #169