i think this should be `composer install` (update is used to update a dep in the composer.lock file)