Composer.lock from updating composer