update composer.lock version