PIM-1852 : drop composer.lock and freeze deps versions

Bug fix: [no]
Feature addition: [no]
Backwards compatibility break: [no]
Unit test passes: [yes]
Specs passes: [yes]
Replaced unit test classes removed: [no]
Behat scenario passes: [yes]
Checkstyle issues: [no]
ChangeLog updated: [yes]
Fixes the following jira: PIM-1852