Updated composer.json/lock to reflect vendor updates.