composer.lock changes