update in composer.lock