Updated composer lock with required dev