pushing composer.lock