Actually commit composer.lock