composer.lock fix update