composer.lock update.